us-market-bubble-detector
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest external data from web searches regarding market sentiment, search trends, and media narratives to calculate bubble scores. This creates a surface for potential indirect prompt injection from malicious web content. 1. Ingestion points: Web search results for metrics like Google Trends, social penetration reports, and media narratives (SKILL.md, references/implementation_guide.md). 2. Boundary markers: The skill mandates a 'Confirmation Bias Prevention Checklist' and strict mechanical scoring to prevent the agent from over-weighting external subjective content. 3. Capability inventory: The agent uses
web_searchto collect data and executes thebubble_scorer.pyscript to finalize assessments. 4. Sanitization: The instructions include strict validation criteria, such as requiring specific dates, names, and a minimum of three independent sources for qualitative adjustments. - [DYNAMIC_EXECUTION]: The skill's test infrastructure (
scripts/tests/test_skill_contract.py) uses Python'simportliblibrary to dynamically load and execute thebubble_scorer.pymodule. While this is a standard practice for local script validation, it represents a dynamic code loading pattern.
Audit Metadata