factor-mason

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a quality-control framework for financial alpha research, focusing on identifying logical errors such as data leakage and unrealistic cost assumptions.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied factor definitions, creating a theoretical attack surface. However, the instructions proactively mitigate this by requiring the agent to adopt a 'suspect-handling' stance and rewrite all inputs into an auditable format before analysis, establishing strong cognitive boundaries.
  • [Ingestion points]: SKILL.md (factor_definition parameter).
  • [Boundary markers]: The workflow mandates a 'suspect-handling' (嫌疑人处理) posture and auditable language translation.
  • [Capability inventory]: The skill is restricted to text-based analysis and contains no file-writing, network, or shell-execution capabilities.
  • [Sanitization]: The skill relies on cognitive restructuring of input rather than programmatic filtering.
  • [COMMAND_EXECUTION]: The project includes a validation script (scripts/check_test_cases.py) used for internal documentation checks. The script uses only standard Python libraries and does not accept untrusted network input, representing standard development practice.
  • [EXTERNAL_DOWNLOADS]: All external URLs point to standard metadata badges (shields.io) or the author's own GitHub repository (quantskills), which is considered a legitimate vendor resource.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:31 AM