portfolio-health-check
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to run Python scripts located in a sibling directory (
../findata-toolkit-cn/scripts/views_runner.py). These scripts are used to fetch financial market data such as stock prices and historical data. - Evidence: Found in
references/data-queries.mdwhere commands likepython ../findata-toolkit-cn/scripts/views_runner.py stock_zh_a_histare documented. - [EXTERNAL_DOWNLOADS]: The skill guides the agent to install Python dependencies from a local file during environment preparation.
- Evidence:
references/data-queries.mdcontains the instructionpython -m pip install -r ../findata-toolkit-cn/requirements.txt. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided portfolio data and external financial data, which represents a potential injection surface if the external data sources were compromised.
- Ingestion points: User input for holdings (Step 1 in
SKILL.md) and external market data viaviews_runner.py. - Boundary markers: The skill uses structured templates (
references/output-template.md) to format results, which provides some structure to the output. - Capability inventory: The skill has access to shell command execution for running diagnostic scripts.
- Sanitization: No explicit sanitization or filtering of external data content is described in the prompt instructions.
Audit Metadata