breakout-trade-planner
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing untrusted data by reading external VCP screener JSON files via
scripts/plan_breakout_trades.py. - Ingestion points: The
--inputCLI parameter loads JSON data into the script's memory. - Boundary markers: The resulting Markdown and JSON reports do not employ specific isolation delimiters for fields derived from the input data.
- Capability inventory: The skill performs file system writes to the specified
--output-dir. - Sanitization: The script implements schema version validation and verifies the presence of all required fields before calculations occur, significantly reducing the surface for injection.
- [EXTERNAL_DOWNLOADS]: The skill uses the
pandas-market-calendarslibrary, which is a standard, well-known dependency for financial applications to manage exchange trading hours. Its inclusion is appropriate for the skill's stated purpose of planning trades based on market sessions.
Audit Metadata