northbound-flow-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for the agent to manage its environment and execute data retrieval tasks. This includes activating a virtual environment, installing dependencies from a local requirements file, and running Python scripts from a shared directory. Evidence found in
references/data-queries.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze financial market data from external providers, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Market data is retrieved from external sources such as EastMoney and AKShare through the
views_runner.pyscript as described inSKILL.mdandreferences/data-queries.md. - Boundary markers: No specific boundary markers or delimiters were identified in the instructions for isolating external data from the agent's core instructions.
- Capability inventory: The skill utilizes shell command execution and Python script execution to perform its primary data analysis functions.
- Sanitization: The provided instructions do not specify any sanitization, validation, or filtering of the external data before it is processed by the agent.
Audit Metadata