moomoo-unusual-derivatives-activity
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions reference
npxcommands for adding or updating the skill from theMoomooOpen/moomoo-agent-hubrepository. This is an official source managed by the vendor. - [COMMAND_EXECUTION]: The skill utilizes the
moomooCLI tool via a shell environment to retrieve and format derivatives market data. - [INDIRECT_PROMPT_INJECTION]: The skill processes stock names and tickers provided by users and incorporates them into shell commands. Although it specifies normalization rules to transform input into standard symbols (e.g.,
US.NVDA), it lacks strict structural validation or delimiters, which could be exploited if an attacker provides a malformed string that the agent fails to sanitize properly before execution. - Ingestion points: The
stock_targetparameter extracted from user requests inSKILL.md. - Boundary markers: None present for the interpolated symbol variables.
- Capability inventory: Execution of CLI commands via the
moomoobinary. - Sanitization: Relies on natural language instructions for stock symbol normalization and mapping.
Audit Metadata