moomoo-unusual-capital-flows
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local CLI tool (
moomoo) via theBashtool to perform financial analysis, which is the primary intended function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided stock names or tickers that are eventually used as arguments in a shell command. The instructions include a strict normalization process to mitigate risks, requiring the agent to map and convert any user input into a standardized symbol format (e.g.,
HK.00700) before execution. - Ingestion points: User-specified
stock_targetextracted from natural language requests inSKILL.md. - Boundary markers: None explicitly used in the command execution string, but the normalization step functions as a logical boundary.
- Capability inventory: Shell command execution via the
Bashtool as documented inSKILL.md. - Sanitization: Detailed instructions provided to the agent to normalize inputs into a specific, safe format (
market.ticker) using provided mapping tables. - [EXTERNAL_DOWNLOADS]: The documentation references updating and installing the skill from the
MoomooOpen/moomoo-agent-hubGitHub repository usingnpx. This repository is a vendor-owned resource associated with the skill author.
Audit Metadata