skills/sepehr071/iran-mcp/tgju/Gen Agent Trust Hub

tgju

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install and run the tgju-mcp package using the uvx tool (e.g., uvx tgju-mcp). This involves downloading and executing code from an external registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest live market data from external TGJU (tgju.org) APIs.
  • Ingestion points: Data is retrieved via tools like tj_get_prices, tj_market_summary, and tj_price_history (SKILL.md).
  • Boundary markers: No specific delimiters or safety instructions are defined to separate the external market data from agent instructions.
  • Capability inventory: The skill provides read-only tools for searching symbols, listing categories, and fetching price tables or history.
  • Sanitization: There is no evidence of sanitization or filtering applied to the data retrieved from the external market APIs before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM