dengxiaofeng-cycle-industry
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown files (SKILL.md and invest.md) that define a logical framework for investment analysis. There are no Python scripts, Node.js packages, or shell commands included in the skill distribution.
- [SAFE]: The skill includes external links to well-known and reputable services such as YouTube and Xueqiu (a established financial community platform) for educational and research purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external financial, technical, and sentiment data, which represents a potential injection surface. 1. Ingestion points: Data is accepted via the 'Inputs Needed' section in SKILL.md. 2. Boundary markers: The instructions do not define specific delimiters for separating external data from agent instructions. 3. Capability inventory: The skill possesses no capabilities for command execution, file system modification, or network requests. 4. Sanitization: No explicit sanitization steps are defined for the input data. Due to the complete lack of exploitable tools or executable code, this represents a negligible risk.
Audit Metadata