market-environment-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection due to its automated ingestion of external web data for market reporting.
- Ingestion Points: In
SKILL.md, the core workflow specifies using theweb_searchtool to fetch real-time stock indices, forex rates, commodity prices, and financial media consensus. - Boundary Markers: Absent. There are no explicit instructions, delimiters, or defensive guidelines to isolate untrusted web text from the core agent instructions.
- Capability Inventory: The execution capabilities are restricted to date processing, session counting, and formatting utilities within
scripts/market_utils.pyandscripts/_market_calendar.py. There are no custom code-level network capabilities, file-writing mechanisms, or subprocess executions. - Sanitization: Absent. The external data is processed as natural language or tabular text without sanitization routines or verification mechanisms.
Audit Metadata