AI-based stock analysis and trading system
C elevated
- capability exposure inferred + 35
- tool safety inferred + 12
- trust mitigators mixed − 8
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
- B · 32 → C · 39
- C · 52 → B · 32
- C · 44 → C · 52
- B · 27 → C · 44
- A · 0 → B · 27
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
dynamic exec: __import__ sink, eval()/exec(), unsafe yaml.load()
- low dangerous code
env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
- low dangerous code
env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 47b58e1 · analyzer v33 · 18h ago
skills & prompt files 3
danger signals41
- dynamic code execution __import__ sink dragon1086-prism-insight-47b58e1/prism-btc/tests/test_shared_entry_policy.py :20
for key in tuple(__import__("os").environ): - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_agent_fit_score_constant_tripwire.py :32
exec(compile(ast.Module(body=[fn], type_ignores=[]), str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_agent_instance_mcp_fallback.py :22
exec(compile(ast.Module(body=[node], type_ignores=[]), path, "exec"), namespace) - dynamic code execution unsafe yaml.load() dragon1086-prism-insight-47b58e1/tests/test_cla_configuration.py :67
workflow = yaml.load(workflow_text, Loader=yaml.BaseLoader) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_codex_oauth_fast_backend.py :320
exec(compile(module, path, "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_company_evidence_contract.py :16
exec(compile(tree, str(source), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_domestic_safe_float.py :37
exec(compile(ast.Module(body=helper_defs, type_ignores=[]), "<helpers>", "exec"), module.__dict__) # type: ignore[arg-type] - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_evidence_capture_repairs.py :26
exec(compile(tree, str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_isolated_agent_effect_branches.py :41
exec(compile(ast.Module(body=[node], type_ignores=[]), filename, "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_kis_hindsight_prices.py :58
exec(compile(ast.Module(body=[node], type_ignores=[]), str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_korean_trading_message.py :55
exec(compile(ast.Module(body=[method], type_ignores=[]), str(source), 'exec'), ns) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_kr_buy_evidence_contract.py :20
exec(compile(tree, str(SOURCE), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_kr_flow_evidence.py :152
exec(compile(ast.Module(body=[node], type_ignores=[]), str(source), "exec"), context) # noqa: S102 - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_kr_shadow_pipeline_hooks.py :51
exec(compile(ast.Module(body=[method], type_ignores=[]), str(source), "exec"), ns) # noqa: S102 - repository method - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_market_analysis_source_guard.py :26
exec(compile(ast.Module(body=block[start:end], type_ignores=[]), "assembly", "exec"), namespace) # noqa: S102 - trusted checked-in AST only - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_market_intelligence_wiring.py :36
exec(compile(ast.Module(body=[function], type_ignores=[]), str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_market_report_singleflight.py :131
exec(compile(ast.Module(body=[method], type_ignores=[]), str(source), "exec"), namespace) # noqa: S102 - trusted repository method - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_micro_split_batch_linkage.py :138
exec(compile(ast.Module(body=[method], type_ignores=[]), str(source), "exec"), ns) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_nasdaq100_constituents.py :16
exec(compile(ast.Module(body=[function], type_ignores=[]), str(path), "exec"), namespace) # noqa: S102 - trusted local function - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_news_competitive_evidence_contract.py :17
exec(compile(tree, str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_pyramid_pilot_exclusion.py :93
exec(compile(ast.fix_missing_locations(ast.Module(body=methods, type_ignores=[])), path, "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_recent_strategy_exit_context.py :97
exec(compile(ast.Module(body=[node], type_ignores=[]), path, "exec"), ns) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_report_failure_privacy.py :138
exec(compile(ast.Module(body=[selector], type_ignores=[]), str(source), "exec"), {"os": SimpleNamespace(environ=environment)}) # noqa: S102 - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_screening_orchestrator_rr_contract.py :34
exec(compile(ast.Module(body=[function], type_ignores=[]), str(path), "exec"), namespace) # noqa: S102 - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_screening_price_evidence.py :65
exec(compile(subset, str(path), "exec"), namespace) # noqa: S102 - trusted repository functions - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_sell_claim_concurrency.py :89
exec(compile(module, str(path), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_telegram_delivery_safety.py :21
exec(compile(ast.Module(body=[method], type_ignores=[]), path, 'exec'), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_us_flow_evidence.py :147
exec(compile(ast.fix_missing_locations(module), relative, "exec"), namespace) # noqa: S102 - own repository method only - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_us_held_candidate_decision.py :51
exec(compile(module, str(AGENT_PATH), "exec"), namespace) - dynamic code execution eval()/exec() dragon1086-prism-insight-47b58e1/tests/test_us_overview_evidence_boundary.py :16
exec(compile(tree, str(source), "exec"), namespace) - suspicious endpoint t.me dragon1086-prism-insight-47b58e1/firebase_bridge.py :157
return f"https://t.me/{username}/{message_id}" - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/prism_core/strategy_ledger_test_delivery.py :66
f"https://api.telegram.org/bot{token}/sendMessage", - suspicious endpoint t.me dragon1086-prism-insight-47b58e1/telegram_ai_bot.py :1600
"다음 링크를 구독한 후 봇을 사용해주세요: https://t.me/stock_ai_agent", - suspicious endpoint t.me dragon1086-prism-insight-47b58e1/telegram_bot_agent.py :154
telegram_link = f"https://t.me/{os.environ.get('TELEGRAM_CHANNEL_USERNAME', 'stock_ai_agent')}/{result.message_id}" - suspicious endpoint 169.254.169.254 (cloud metadata) dragon1086-prism-insight-47b58e1/tests/test_codex_probe_mcp_bridge.py :251
("yahoo_finance", "get_stock_info", {"ticker": "AAPL", "url": "http://169.254.169.254"}), - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/tests/test_strategy_ledger_test_delivery.py :111
assert url == f"https://api.telegram.org/bot{TOKEN}/sendMessage" - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/tests/test_telegram_delivery_diagnostics.py :23
error = TimedOut("https://api.telegram.org/botSECRET private-message private-chat") - suspicious endpoint t.me dragon1086-prism-insight-47b58e1/tests/test_telegram_moderation.py :280
invite_link=SimpleNamespace(invite_link="https://t.me/+shared"), - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/tools/firecrawl_quality_check.py :184
f"https://api.telegram.org/bot{BOT_TOKEN}/sendMessage", - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/tools/oauth_healthcheck.py :106
f"https://api.telegram.org/bot{BOT_TOKEN}/sendMessage", - suspicious endpoint api.telegram.org dragon1086-prism-insight-47b58e1/tools/subscriber_healthcheck.py :72
f"https://api.telegram.org/bot{BOT_TOKEN}/sendMessage",
[](https://mcpobservatory.com/servers/github:dragon1086/prism-insight/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of dragon1086.