trader-memory-core
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The launcher script
trader_memory_cli.pyusessubprocess.callto execute internal sibling scripts (thesis_store.py,thesis_ingest.py,thesis_review.py) within the skill's environment. It can optionally route these calls through theuvpackage manager if available, ensuring dependencies are met. This execution is limited to known local scripts. - [EXTERNAL_DOWNLOADS]: The
fmp_price_adapter.pycomponent performs network requests tofinancialmodelingprep.comto retrieve historical price data for stocks. These requests are used to calculate performance metrics and require an API key supplied by the user via environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting data from external files produced by other agent skills.
- Ingestion points: The
thesis_ingest.pyscript reads JSON and CSV files provided via the--inputor--bulk-csvcommand-line arguments. - Boundary markers: Structural boundaries are enforced through strict
jsonschemavalidation defined inschemas/thesis.schema.jsonbefore any data is persisted. - Capability inventory: The skill has the capability to write to the local file system (state directory) and perform network GET requests.
- Sanitization: Inputs are parsed and mapped to a fixed internal schema, and numeric fields undergo range and finiteness checks to prevent malformed data from affecting calculations.
Audit Metadata