emerging-movers
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script uses
subprocess.runto execute a platform-specific CLI tool namedmcporter. This execution is confined to a static, hardcoded command structure (['mcporter', 'call', 'senpi', 'leaderboard_get_markets', 'limit=100']) that does not accept dynamic or untrusted input, preventing command injection risks. - [SAFE]: File system interactions are limited to the local
/data/workspace/directory for managing scan history and reading configuration files, which is expected behavior for stateful monitoring scripts. - [SAFE]: No instances of prompt injection, data exfiltration, or obfuscation were identified. The code is clearly structured and its operations align with the stated purpose of analyzing market trends.
- [SAFE]: The skill does not include any automated persistence mechanisms or privilege escalation attempts. Documentation provides manual instructions for a cron setup, ensuring user-controlled execution.
Audit Metadata