sentiment-analysis-trading
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process untrusted data from external sources such as social media (Twitter/X, Reddit, Discord) and news headlines.
- Ingestion points: Untrusted data enters the agent context through the
analyze_tweetfunction (processingtweet['text']),analyze_reddit_post(processing post titles and comments), andanalyze_headline(processing news strings) withinreferences/patterns.md. - Boundary markers: The skill implements basic text cleaning in
clean_tweetusing regex to remove cashtags, URLs, and mentions. However, it lacks robust delimiters or explicit instructions to the agent to disregard potential instructions embedded within the processed text. - Capability inventory: The skill provides logic for sentiment scoring and data aggregation. No high-risk capabilities such as arbitrary shell execution, network exfiltration, or sensitive file system access were identified in the reference scripts.
- Sanitization: Basic sanitization is performed via regex cleaning and truncation of text to 512 tokens for model compatibility, which provides some mitigation against long-form injection attempts.
- [EXTERNAL_DOWNLOADS]: The implementation patterns in
references/patterns.mdrely on thetransformerslibrary to load theProsusAI/finbertmodel. - The code utilizes the
transformers.pipelineAPI, which downloads pre-trained model weights from Hugging Face's official repository. This is a standard practice for the intended financial NLP tasks.
Audit Metadata