track-agri-hedge-fund-positioning
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): Downloads data from CFTC and FRED APIs (Evidence: scripts/fetch_cot_data.py, references/data-sources.md).
- [COMMAND_EXECUTION] (LOW): Executes local scripts to process market data (Evidence: workflows/analyze.md).
- [DATA_EXFILTRATION] (LOW): Framework for sending alerts to Slack or Telegram (Evidence: workflows/monitor.md).
- [INDIRECT_PROMPT_INJECTION] (LOW): Ingests and processes external financial data; numeric/structured nature of data limits injection risk (Evidence: scripts/fetch_cot_data.py). Mandatory Evidence: (1) Ingestion: External market data via API/CSV; (2) Boundaries: Absent; (3) Capabilities: Subprocess, file-write, network; (4) Sanitization: Numeric type enforcement.
Audit Metadata