hot-rank-sentiment-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage its environment and run data retrieval tools. Specifically, it uses
source ../../.venv/bin/activateto enter a virtual environment and runs Python scripts located in a sibling directory (../findata-toolkit-cn/scripts/views_runner.py). - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to perform package installations using
pip install -r ../findata-toolkit-cn/requirements.txtto prepare the execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from external financial platforms (e.g., East Money, Xueqiu) and user-provided inputs like tables or screenshots.
- Ingestion points: Data is pulled from external API views via the
views_runner.pyscript and from user-supplied data as described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested financial data.
- Capability inventory: The skill possesses the ability to execute shell commands and Python scripts within the local environment.
- Sanitization: There is no evidence of sanitization or validation performed on the external data before it is processed by the agent.
- [CREDENTIALS_UNSAFE]: The documentation in
references/data-queries.mdmentions the requirement for aXUEQIU_TOKENenvironment variable to access certain data views, indicating the handling of sensitive API credentials.
Audit Metadata