market-intel
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and interprets data from external, untrusted sources which may contain malicious instructions designed to influence the agent's analysis or actions.
- Ingestion points: The skill uses
WebFetchandWebSearchto retrieve content fromSeeking Alpha,Reddit(e.g., r/wallstreetbets), and various news outlets to assess sentiment and catalysts, as detailed inreferences/data-sources.md. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following directions embedded within the fetched external data.
- Capability inventory: The agent has
WriteandEditpermissions, used to generate reports in the{cwd}/reports/market-intel/directory, which could be abused if an injection succeeds. - Sanitization: The instructions do not specify any validation or filtering mechanisms for the external data before it is processed by the analytical framework.
Audit Metadata