cross-border-flow-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of descriptive text, report templates, and analytical frameworks. It does not include any executable scripts, binary files, or automation code.
- [SAFE]: No hardcoded credentials, API keys, or sensitive local file paths (e.g., .ssh, .env) were detected.
- [SAFE]: The external data sources mentioned (eastmoney.com, 10jqka.com.cn, hkex.com.hk, wind.com.cn) are well-known, legitimate financial information platforms appropriate for the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external financial websites. While this creates a potential surface for indirect prompt injection (where instructions could be hidden in external data), the risk is minimal as the skill defines no dangerous tools or capabilities (such as shell execution or file writing) that could be exploited. This represents a standard operating surface for information-retrieval agents.
Audit Metadata