stock-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
run_backtest.pyscript usesimportlib.import_moduleto load user-configured strategy classes from local files, which is a required functional component for customizable backtesting simulations. - [COMMAND_EXECUTION]: Multiple scripts, including
financial_cli.pyandfetch_data.py, utilizesubprocess.runto call platform-specific authentication tools and local CLI helpers for data retrieval. - [EXTERNAL_DOWNLOADS]: The
setup.shscript installs thenautilus_traderlibrary andrequestspackage from official registries. These are well-known libraries used for the skill's primary simulation functionality. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests untrusted news headlines and long-form research articles through the
research/newsandresearch/searchendpoints. - Boundary markers: The
SKILL.mdinstructions explicitly direct the agent to manually judge the tone of news headlines, maintaining a separation between data and instructions. - Capability inventory: The skill maintains capabilities for local command execution via
subprocessand database interaction via a read-only SQL endpoint. - Sanitization: The
financial_cli.pyscript enforces a strict_validate_read_only_sqlcheck that blocks mutating keywords likeDELETE,DROP, andUPDATE, effectively preventing accidental or malicious database modifications.
Audit Metadata