trade-quick
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from web searches to generate financial signals, creating an indirect prompt injection surface.
- Ingestion points: The skill performs three parallel web searches (Queries A, B, and C) in SKILL.md to gather stock data.
- Boundary markers: No delimiters or protective instructions are used to separate external data from the agent's core instructions.
- Capability inventory: The skill is restricted to terminal output and is explicitly instructed not to use subagents or write to files.
- Sanitization: No sanitization or validation of the retrieved web content is mentioned or performed before the data is processed by the AI.
Audit Metadata