technical-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied ticker symbols which are processed to generate financial reports.
  • Ingestion points: SYMBOL argument in scripts/technicals.py and SYMBOLS argument in scripts/correlation.py.
  • Boundary markers: Data is processed as distinct arguments within a shell execution context.
  • Capability inventory: The skill performs network operations via yfinance to retrieve market data and executes local Python computational logic.
  • Sanitization: Symbols are sanitized using Python's strip() and upper() methods, ensuring they conform to standard ticker formats.
  • [SAFE]: The skill uses industry-standard libraries including numpy, pandas, pandas-ta, and yfinance for its primary functions.
  • [SAFE]: Analysis of the source code found no evidence of credential harvesting, obfuscation, privilege escalation, or persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:02 PM