tgju
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install and run the
tgju-mcppackage using theuvxtool (e.g.,uvx tgju-mcp). This involves downloading and executing code from an external registry. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest live market data from external TGJU (tgju.org) APIs.
- Ingestion points: Data is retrieved via tools like
tj_get_prices,tj_market_summary, andtj_price_history(SKILL.md). - Boundary markers: No specific delimiters or safety instructions are defined to separate the external market data from agent instructions.
- Capability inventory: The skill provides read-only tools for searching symbols, listing categories, and fetching price tables or history.
- Sanitization: There is no evidence of sanitization or filtering applied to the data retrieved from the external market APIs before it is processed by the agent.
Audit Metadata