screen-stocks
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs, including financial metrics via
yahoo_clientand trending themes viagrok_client. This introduces a potential surface for indirect prompt injection where instructions hidden in stock metadata or social media trends could attempt to influence the agent's behavior. - Ingestion points: Data is retrieved from Yahoo Finance and Grok API (X search) and processed within
scripts/run_screen.pyfor display. - Boundary markers: There are no explicit delimiters or specific instructions for the agent to disregard potential commands embedded within the external data sources.
- Capability inventory: The skill is granted restricted execution of Python scripts via the
Bashtool and possesses capabilities for network access, file history logging, and knowledge graph updates. - Sanitization: While command-line arguments are structured via
argparse, content from external API responses is rendered directly into Markdown tables without specialized sanitization for instruction markers.
Audit Metadata