ito-basket-compare
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data including portfolio notes, research memos, and financial documents. * Ingestion points: User's notes, docs, memory snippets, watchlist, holdings summary, and financial context as defined in SKILL.md. * Boundary markers: Absent. * Capability inventory: Read-only access to external market data via API. * Sanitization: Instructions included to preserve privacy by summarizing only fields required for comparison.
- [CREDENTIALS_UNSAFE]: The skill mentions the requirement for an
ITO_API_KEYto fetch market data. It follows safe practices by treating the key as a configuration variable rather than hardcoding a secret and restricts usage to read-only operations upon explicit user request.
Audit Metadata