taiwan-equity-research-coverage
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires cloning a project repository from
github.com/Timeverse/My-TW-Coverageand installing several third-party libraries (yfinance,pandas,tabulate) viapip. - [COMMAND_EXECUTION]: The skill provides examples and triggers that instruct the agent to use
subprocess.runor direct shell execution to run local Python scripts (e.g.,add_ticker.py,update_financials.py,discover.py) to manage the database. - [INDIRECT_PROMPT_INJECTION]: The skill builds a knowledge graph by ingesting financial reports and external research data, which presents a surface for indirect prompt injection.
- Ingestion points: Research reports stored in
Pilot_Reports/and JSON data provided via theupdate_enrichment.pyscript. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious instructions embedded within the research reports.
- Capability inventory: The skill possesses the capability to execute shell commands via
subprocess.runand perform network operations using theyfinancelibrary. - Sanitization: While the skill includes an
audit_batch.pyscript for quality control, it focuses on content completeness and formatting rather than security sanitization or filtering of prompt injection patterns.
Audit Metadata