stock-technical-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions specify the execution of a local Python script to retrieve and process financial model tensors and scores.
- Evidence:
python scripts/em.py get_alpha360_tensor --secid 0.002074inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests financial data from external market APIs, though the risk is inherent to the financial analysis use case.
- Ingestion points: The skill uses
get_kline,get_realtime_quote,get_historical_series,get_quant_technical, andget_stock_fund_flowtools to pull data into the agent's context (SKILL.md). - Boundary markers: None identified in the prompt instructions.
- Capability inventory: The skill utilizes subprocess execution to run the local script
scripts/em.py. - Sanitization: No explicit sanitization or filtering of API data is described in the workflow.
Audit Metadata