aipa-analyze

Pass

Audited by Gen Agent Trust Hub on May 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install or run the aipa-cli package from PyPI using uvx or pip. These are standard package management operations but involve downloading external code.
  • [COMMAND_EXECUTION]: The skill's primary functionality relies on executing shell commands (aipa-cli, uvx, pip).
  • [PROMPT_INJECTION]: The skill exhibits a surface for Indirect Prompt Injection (Category 8).
  • Ingestion points: The aipa analyze command fetches ticker data and news/events research from external web sources as described in the 'News & Events Research' template in SKILL.md.
  • Boundary markers: The documentation does not specify the use of delimiters or boundary markers to separate fetched web content from agent instructions.
  • Capability inventory: The agent has the capability to execute shell commands via the aipa CLI across various subcommands.
  • Sanitization: There is no evidence of sanitization or filtering of the external data fetched during the research process before it is presented to the model.
Audit Metadata
Risk Level
SAFE
Analyzed
May 29, 2026, 02:30 AM
Security Audit — agent-trust-hub — aipa-analyze