earnings-recap
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the
!syntax inSKILL.mdto execute a Python script (python3 -c "exec(...)") during the skill loading phase. This is used to automatically check for the presence and version of theyfinancelibrary in the execution environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data from Yahoo Finance which could be manipulated by third parties to influence agent behavior.
- Ingestion points: Headlines and content from the
ticker.newsAPI call inSKILL.md. - Boundary markers: Absent. The skill does not use delimiters or instructions to ignore potential commands embedded in news titles.
- Capability inventory: The skill demonstrates the ability to execute shell commands via
subprocess.check_calland dynamic context injection. - Sanitization: None. The external news data is processed and presented to the agent without filtering or escaping.
- [EXTERNAL_DOWNLOADS]: In
SKILL.md, the skill includes logic to download and install theyfinancepackage from the Python Package Index (PyPI) usingpipif the library is not already installed. - [COMMAND_EXECUTION]: The skill uses
subprocess.check_callto run package management commands and utilizes shell-based commands for environment discovery during the load process. - [DYNAMIC_EXECUTION]: The environment check located in
SKILL.mdemploys theexec()function within a Python one-liner to dynamically evaluate code that checks for module availability.
Audit Metadata