tigeropen-rust
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill serves as a reference for integrating the Tiger Brokers OpenAPI using the official Rust SDK.
- [DATA_EXFILTRATION]: No data exfiltration patterns were identified. While the skill guides the agent in handling sensitive configuration data such as Tiger IDs and RSA private keys, it uses standard placeholders and best-practice configuration patterns (e.g., environment variables and properties files) without attempting to send this data to unauthorized external endpoints.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were found. The suggested dependencies are well-known, official Rust crates (e.g., tigeropen, tokio, serde_json), and the skill does not attempt to download or execute external scripts at runtime.
- [PROMPT_INJECTION]: The skill does not contain any instructions that attempt to bypass safety filters, override system prompts, or manipulate the agent's core behavioral guidelines.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process structured market and account data. It does not ingest untrusted natural language data from external sources that could lead to indirect injection attacks.
Audit Metadata