optimize
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input from
$ARGUMENTS(specifically the strategy name and symbol) to construct file system paths and directory names. - Ingestion points: User-supplied variables
$0(strategy name) and$1(symbol) inSKILL.md. - Boundary markers: No explicit sanitization or boundary markers are defined for the interpolation of these variables into shell-executable file paths.
- Capability inventory: The agent has access to
WriteandBashtools, allowing it to create directories and execute the generated scripts. - Sanitization: Absent; the instructions do not require validation of the input to prevent path traversal (e.g., using
../in a strategy name). - [COMMAND_EXECUTION]: The skill is designed to generate complex Python scripts that perform file system operations, network requests via APIs (OpenAlgo), and data processing. The agent is then expected to manage these scripts using
Bash.
Audit Metadata