skills/quantskills/skill-global-macro-trend-strategy/global-macro-trend-strategy/Gen Agent Trust Hub
global-macro-trend-strategy
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes local Python scripts (
backtest.pyandvalidate_report.py) designed to perform statistical analysis and structural validation of research reports. - [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV data provided by the user, which is a potential attack surface for indirect prompt injection.
- Ingestion points: User-supplied price and signal CSV files are loaded via the
load_pricesandload_signalfunctions inscripts/backtest.py. - Boundary markers: No explicit delimiters are used in the generated markdown reports, but the agent is guided by structured templates in the
references/directory. - Capability inventory: The skill performs local file read/write operations within the workspace; it has no network access or high-privilege execution capabilities.
- Sanitization:
scripts/backtest.pyusespd.to_numericwitherrors='coerce'andpd.to_datetime, which effectively neutralizes text-based injection payloads by converting non-numeric content into NaN values or raising errors if required columns are missing. - [DATA_EXFILTRATION]: The skill's documentation and source code confirm an offline-only design. Analysis of the Python scripts shows no use of networking libraries such as
requests,urllib, or socket-level operations.
Audit Metadata