signal-aggregation

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses local endpoints (http://localhost:8011/signal and http://localhost:8011/execute) for all network operations. This is a common and safe pattern for local tool integration, and no communication with untrusted external domains was found.
  • [SAFE]: No obfuscation techniques, such as Base64 encoding, zero-width characters, or homoglyphs, were used to hide instructions or URLs.
  • [SAFE]: The skill does not contain any patterns for prompt injection, privilege escalation, or persistence. Its functionality is transparent and strictly limited to its stated purpose of trade signal management.
  • [SAFE]: While the skill ingests data from a local service to determine trade actions (a surface for indirect prompt injection), the risk is mitigated by the fact that the data source is internal (localhost).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 07:46 AM
Security Audit — agent-trust-hub — signal-aggregation