industry-chain-mapper
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for activating a virtual environment and running Python scripts located in sibling directories outside the skill's root (e.g.,
../../.venv/bin/activateand../findata-toolkit-cn/scripts/views_runner.py). - [EXTERNAL_DOWNLOADS]: The skill triggers the installation of Python dependencies using
pip install -rfrom a local requirements file (../findata-toolkit-cn/requirements.txt) that is external to the skill's own directory. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted market data from external financial tools (e.g.,
stock_board_industry_name_em) into analytical reports. * Ingestion points: Data queries defined inreferences/data-queries.mdwhich fetch JSON from various market providers. * Boundary markers: None identified in the workflow or output templates. * Capability inventory: The skill has the capability to execute shell commands and run arbitrary Python scripts from the local filesystem. * Sanitization: No data validation or sanitization logic is specified for the content returned by the market data tools.
Audit Metadata