stress-test
Warn
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/run_stress_test.pyuses a custom dynamic import mechanism to load analysis modules at runtime. - Evidence: The script utilizes a
try_importfunction to conditionally load modules likesrc.core.risk.correlationandsrc.core.risk.shock_sensitivitybased on their availability in the local environment. - Evidence: The script modifies the Python search path using
sys.path.insert(0, ...)to include parent directories for importing local source files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external financial data and user-provided scenarios, which are then interpreted by the AI agent to generate qualitative analysis.
- Ingestion points: The skill ingests ticker symbols and scenario descriptions via command-line arguments in
SKILL.mdand fetches external data throughyahoo_clientinscripts/run_stress_test.py. - Boundary markers: The skill defines a 10-step structured output pipeline in
SKILL.mdto guide the agent's response format. - Capability inventory: The skill has access to the
Bashtool and performs local file writes to save test history viasrc.data.history.save_stress_test. - Sanitization: Input symbols are split and stripped, and weights are converted to floats; however, external data from the stock API is processed directly by the agent for "LLM interpretation" and "LLM complement" steps.
Audit Metadata