contrarian-setup-gate
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external JSON report files, which creates an attack surface for indirect prompt injection if the inputs contain malicious instructions targeting a downstream agent. 1. Ingestion points: The skill accepts three external JSON report files through CLI arguments
--detector-json,--news-json, and--price-action-jsoninscripts/run_contrarian_setup_gate.py. 2. Boundary markers: No explicit delimiter boundaries or 'ignore' instructions are provided to the agent for the output reports. 3. Capability inventory: The skill writes JSON and Markdown reports to the local file system. 4. Sanitization: The skill implements strict schema validation, type checking, and a specialized scanner ingate_logic.pythat rejects any input containing non-finite floats to prevent malformed output generation. - [DYNAMIC_EXECUTION]: The skill's test infrastructure uses dynamic module loading to verify consistency across different components of the workflow. Evidence: The script
scripts/tests/test_gate_logic.pyutilizesimportlib.utilto dynamically load and execute theweekly_price_action.pyscript from a relative path outside the skill's own directory.
Audit Metadata