emerging-movers

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script uses subprocess.run to execute a platform-specific CLI tool named mcporter. This execution is confined to a static, hardcoded command structure (['mcporter', 'call', 'senpi', 'leaderboard_get_markets', 'limit=100']) that does not accept dynamic or untrusted input, preventing command injection risks.
  • [SAFE]: File system interactions are limited to the local /data/workspace/ directory for managing scan history and reading configuration files, which is expected behavior for stateful monitoring scripts.
  • [SAFE]: No instances of prompt injection, data exfiltration, or obfuscation were identified. The code is clearly structured and its operations align with the stated purpose of analyzing market trends.
  • [SAFE]: The skill does not include any automated persistence mechanisms or privilege escalation attempts. Documentation provides manual instructions for a cron setup, ensuring user-controlled execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 09:43 PM