moexalgo-mega-alerts
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the python-dotenv library to manage API keys through environment variables, which is a recommended security practice for handling credentials.
- [SAFE]: All identified dependencies, including moexalgo and python-dotenv, are either well-known public packages or belong to the official vendor infrastructure.
- [SAFE]: Ingestion points: Market.alerts and Ticker.alerts (SKILL.md, references/mega-alerts.md). Boundary markers: Absent. Capability inventory: Benign data analysis (grouping, pivots, and statistics). Sanitization: Structured JSON parsing with error handling. This configuration presents no exploitable surface for indirect prompt injection as it lacks dangerous execution capabilities.
Audit Metadata