report-stock
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/report.pyusinguv runto perform its core logic of data aggregation and analysis. - [EXTERNAL_DOWNLOADS]: The skill declares a dependency on
trading-skills, a library that likely fetches market data from external financial providers at runtime to populate the generated reports. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by interpolating external financial data (such as company descriptions) into report templates. Ingestion points: Data gathered by
scripts/report.py. Boundary markers: None identified in the Markdown or PDF templates. Capability inventory: Execution of Python scripts viauvand file creation or writing in thesandbox/directory. Sanitization: No evidence of data sanitization or instruction filtering was detected in the provided source files.
Audit Metadata