stock-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/analyze.pyusesos.systemto automate the installation of therequestslibrary if it is missing and usessubprocess.callto orchestrate internal helper scripts for different analysis modes. - [EXTERNAL_DOWNLOADS]: The skill fetches article content and market data from the developer's infrastructure at
redfox.hk. It also performs external package installation of the standardrequestslibrary viapip. - [INDIRECT_PROMPT_INJECTION]: The skill processes financial articles fetched from an external API, which are subsequently interpolated into prompts for analysis and validation tasks.
- Ingestion points: Article titles, summaries, and content are retrieved via the
fetch_articles_paginatedfunction in multiple scripts. - Boundary markers: Data is enclosed within markdown code blocks in the generated tasks provided to the LLM.
- Capability inventory: The skill has the capability to execute shell commands via
subprocessandos.system, and can write output files to the localoutput/directory. - Sanitization: The skill relies on code block delimiters but does not perform explicit escaping or filtering of the fetched content.
Audit Metadata