skills/terminalskills/skills/openbb/Gen Agent Trust Hub

openbb

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill processes financial news headlines from external providers, which introduces a potential for indirect prompt injection.
  • Ingestion points: Company news headlines fetched via obb.news.company in Example 1 of SKILL.md.
  • Boundary markers: Absent; the skill does not use delimiters or instructions to prevent the agent from following commands embedded in fetched text.
  • Capability inventory: Performs network requests to financial data providers and structured data manipulation for AI agents.
  • Sanitization: None; fetched text is directly integrated into the agent context without validation.
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the OpenBB financial data platform and its dependencies from a standard registry.
  • Evidence: pip install openbb and pip install "openbb[all]" commands in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:32 AM
Security Audit — agent-trust-hub — openbb