backtest
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external datasets (Pandas DataFrames) and strategy configurations in
evaluate_exit_factorandVectorBacktester. While this represents a potential surface for indirect prompt injection if processing untrusted user data, the implementation lacks risky automated actions following the data ingestion. Evidence found inexit_analysis.pyandvector.py. - [DYNAMIC_EXECUTION]: The
evaluate_exit_factorfunction inexit_analysis.pyutilizes dependency injection by accepting abacktester_clsandexit_filtercallables. This is a standard architectural pattern for modular research frameworks and does not involve unsafe string evaluation or execution of untrusted remote code. - [COMMAND_EXECUTION]: The skill performs temporary redirection of
sys.stdoutto a buffer (io.StringIO) inexit_analysis.pywithin the_run_backtest_silentfunction to suppress console output during strategy execution. This is a benign utility function for cleaner logs and does not execute shell commands or exfiltrate data.
Audit Metadata