skills/shouldnotappearcalm/a-share-skill/a-share-strategy-mainboard-multi-swing-defensive/Gen Agent Trust Hub
a-share-strategy-mainboard-multi-swing-defensive
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial market data from well-known and reputable services including Tencent (gtimg.cn), Sina (sina.com.cn), and Eastmoney (via the akshare library). These operations are standard for the skill's purpose of stock analysis.
- [COMMAND_EXECUTION]: The skill uses Python's ThreadPoolExecutor in
scripts/daily_decisions.pyandscripts/realtime_quotes.pyto perform concurrent network requests for stock data, which is an efficient implementation for scanning large stock universes. - [DATA_EXPOSURE]: The script
scripts/daily_decisions.pyallows reading a local file via the--holdingsargument to check for sell signals. It specifically extracts 6-digit stock codes and does not attempt to access sensitive system files or credentials. - [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect injection as it processes data from external APIs.
- Ingestion points:
MarketDataProvider.get_quote,get_history, andget_mainboard_universeinscripts/paper_trading/market_data.pyfetch data from gtimg.cn, sina.com.cn, and akshare. - Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded in stock names or metadata.
- Capability inventory: Uses
ThreadPoolExecutorfor parallel processing,requests.getfor network access, andPath.read_textfor local file ingestion. - Sanitization: The skill validates and coerces numeric fields (prices, volumes), but passes stock names as strings directly into the output payload without specific escaping for LLM context.
Audit Metadata