kelly-invest-webull
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The synchronization process in
scripts/sync_webull.mjsspawns a Python subprocess to runscripts/webull_bridge.py. This bridge is used to interface with the official Webull OpenAPI SDK, which is a legitimate functional requirement for retrieving brokerage data. - [EXTERNAL_DOWNLOADS]: The skill requires the
webull-openapi-python-sdkpackage to be installed from PyPI in the execution environment. While this is an external dependency, it is the official library for the integrated service and is documented as a prerequisite for the synchronization script. - [INDIRECT_PROMPT_INJECTION]: The skill processes account names and position data fetched from an external source (Webull). This data enters the agent's context during summarization and represents an indirect prompt injection surface. However, the AirApp UI implements proper HTML escaping for browser display, and the data is treated as read-only.
Audit Metadata