openbb
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes financial news headlines from external providers, which introduces a potential for indirect prompt injection.
- Ingestion points: Company news headlines fetched via
obb.news.companyin Example 1 ofSKILL.md. - Boundary markers: Absent; the skill does not use delimiters or instructions to prevent the agent from following commands embedded in fetched text.
- Capability inventory: Performs network requests to financial data providers and structured data manipulation for AI agents.
- Sanitization: None; fetched text is directly integrated into the agent context without validation.
- [EXTERNAL_DOWNLOADS]: Fetches and installs the OpenBB financial data platform and its dependencies from a standard registry.
- Evidence:
pip install openbbandpip install "openbb[all]"commands inSKILL.md.
Audit Metadata