drawdown-circuit-breaker
Warn
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The test file
scripts/tests/test_check_circuit_breaker.pyperforms dynamic code loading by importing a companion module (thesis_store.py) from a relative filesystem path usingimportlib. Executing code from paths computed at runtime represents a security risk as it could be manipulated to load malicious scripts if the directory structure is compromised.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted trade data from local YAML files to evaluate risk thresholds. This ingestion of external data creates a surface for indirect prompt injection or data poisoning, which could influence the agent's decision-making or bypass risk limits.\n - Ingestion points: Data is loaded from
th_*.yamlfiles located in thestate/theses/directory.\n - Boundary markers: The skill produces
circuit_breaker_decisionreports in JSON and Markdown formats for use as gates in trading workflows.\n - Capability inventory: The skill performs read operations on local data files and write operations for report generation.\n
- Sanitization: The implementation employs
yaml.safe_loadand performs rigorous numeric type and range validation on all ingested metrics.
Audit Metadata