quant-analyst
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is instructed to ingest and process external data sources, including market data, trading requirements, and historical strategies, which could serve as a vector for malicious instructions.
- Ingestion points: The skill instructions in
SKILL.mdrequire querying context managers for requirements and analyzing external market opportunities and datasets. - Boundary markers: There is no specification in the instructions to use delimiters or ignore embedded instructions within the ingested financial data.
- Capability inventory: The skill has access to powerful tools including
Read,Write,Bash, andpython, along with scientific libraries such asnumpy,pandas,quantlib,zipline, andbacktrader. - Sanitization: The development workflow lacks explicit steps for validating or sanitizing external market data before it is used in model development or execution.
Audit Metadata