sector-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches sector performance metrics from the author's public GitHub repository (tradermonty/uptrend-dashboard) using the Python standard library's
urllib. This is expected behavior for a data-driven analysis tool and targets the vendor's own infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CSV files which are subsequently interpreted by the agent. This risk is effectively mitigated by the skill's script, which strictly parses specific numeric and categorical fields (such as uptrend ratios and trend labels) rather than executing or interpolating unstructured text from the data source.
Audit Metadata