trading-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data from Yahoo Finance. While any external data source presents a surface for indirect prompt injection, financial market data is highly structured, reducing the likelihood of accidental instruction following.
- Ingestion points: Yahoo Finance API market data (referenced in SKILL.md)
- Boundary markers: Not specified in the documentation
- Capability inventory: File writing (Markdown, JSON, PNG) to the
reports/directory - Sanitization: Not explicitly detailed in the provided documentation
- [EXTERNAL_DOWNLOADS]: The skill downloads real-time market data from Yahoo Finance, which is a well-known and reputable service.
- [NO_CODE]: The analyzed skill package contains documentation and metadata but does not include any executable scripts or source code files.
Audit Metadata