trade-earnings
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites via
web_searchto extract earnings details, analyst expectations, and options data. This creates a surface where malicious instructions embedded in third-party financial previews could influence the agent's behavior. - Ingestion points: Web search results for ticker-specific earnings dates, whisper numbers, and analyst expectations (Phases 1, 2, and 5).
- Boundary markers: Absent. The instructions do not explicitly tell the agent to ignore instructions found within the search results.
- Capability inventory:
web_searchfor data gathering,execute_code(Python) for calculating expected moves, and file writing to generate the final report. - Sanitization: Absent. The skill does not describe any validation or filtering of the content retrieved from the web before using it in calculations or report generation.
- [COMMAND_EXECUTION]: The skill utilizes the
execute_codetool to perform mathematical operations (Phase 5). While the provided template is a standard calculation for implied volatility and expected moves, the use of this capability alongside untrusted web data represents a standard risk factor for agent skills.
Audit Metadata