theme-detector

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches market data and sector performance metrics from external sources. These include:
  • https://raw.githubusercontent.com/tradermonty/uptrend-dashboard/main/data/uptrend_ratio_timeseries.csv (Author's own repository).
  • https://financialmodelingprep.com/api/v3/* (FMP API).
  • https://elite.finviz.com/export.ashx and https://finviz.com/screener.ashx (FINVIZ financial service).
  • These downloads are intrinsic to the skill's purpose of market theme detection and target established financial services or the author's specified data dashboard.
  • [DATA_EXPOSURE]: The skill requests FINVIZ_API_KEY and FMP_API_KEY to function. These are used strictly for authenticating requests to the respective financial APIs. No evidence of these keys being sent to unauthorized third parties was found.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data as it parses CSV files from a public GitHub repository (uptrend-dashboard) and responses from FINVIZ/FMP. While it lacks explicit boundary markers for the data incorporated into its final report, the risk is categorized as low because the data is processed as structured financial metrics rather than executable instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 08:02 AM