senpi-getting-started-guide
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to initialize and maintain a local state file located at
~/.config/senpi/state.json. It utilizesnode -pto parse and extract values from this JSON file. This behavior is found inSKILL.mdandreferences/next-steps.md. - [EXTERNAL_DOWNLOADS]: The documentation in
SKILL.mdprovides installation instructions that fetch the skill's source files directly from the author's official GitHub repository atSenpi-ai/senpi-skills. - [PROMPT_INJECTION]: The skill processes data fetched from external MCP tools and interpolates this into user-facing templates, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the system via MCP tool outputs (e.g.,
discovery_get_top_traders) as described inreferences/discovery-guide.mdand the localstate.jsonfile inSKILL.md. - Boundary markers: No explicit delimiters or "ignore instructions" warnings are used to separate external data from the agent's core instructions when displaying content to the user.
- Capability inventory: The skill has the capability to execute financial trades (creating and closing mirror strategies) via the Senpi MCP tools documented in
references/strategy-management.mdand can perform file-write operations to the local file system. - Sanitization: The skill does not describe specific sanitization, escaping, or validation routines for data received from the MCP server before it is processed and presented.
Audit Metadata