quant-analyst
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process market data to generate trading strategies and code, which creates a potential surface for indirect prompt injection if the source data is attacker-controlled.\n
- Ingestion points: Market data ingestion pipelines as described in SKILL.md.\n
- Boundary markers: Absent; the instructions do not specify the use of delimiters or provide warnings to the agent regarding potential instructions embedded in processed data.\n
- Capability inventory: Generation of Python code for strategy implementation and visualization using pandas, numpy, and scipy.\n
- Sanitization: Absent; while the skill emphasizes data validation for quality, it lacks specific instructions for sanitizing data against prompt injection attacks.\n- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected within the skill instructions or metadata.\n
- The dependencies listed (pandas, numpy, scipy) are standard industry-wide libraries for data science.\n
- The skill does not attempt to access sensitive files, environment variables, or perform unauthorized network requests.
Audit Metadata