technical-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied ticker symbols which are processed to generate financial reports.
- Ingestion points:
SYMBOLargument inscripts/technicals.pyandSYMBOLSargument inscripts/correlation.py. - Boundary markers: Data is processed as distinct arguments within a shell execution context.
- Capability inventory: The skill performs network operations via
yfinanceto retrieve market data and executes local Python computational logic. - Sanitization: Symbols are sanitized using Python's
strip()andupper()methods, ensuring they conform to standard ticker formats. - [SAFE]: The skill uses industry-standard libraries including
numpy,pandas,pandas-ta, andyfinancefor its primary functions. - [SAFE]: Analysis of the source code found no evidence of credential harvesting, obfuscation, privilege escalation, or persistence mechanisms.
Audit Metadata