earnings-recap
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses dynamic context injection (the
!commandsyntax) inSKILL.mdto execute a shell command that checks for the presence of theyfinancepackage when the skill is loaded. - [COMMAND_EXECUTION]: Instructs the agent to utilize the
subprocessmodule to runpip installfor theyfinancelibrary if it is not already installed in the environment. - [EXTERNAL_DOWNLOADS]: Fetches and installs the
yfinancepackage from the official Python Package Index (PyPI) to support financial data retrieval. - [PROMPT_INJECTION]: Subject to indirect prompt injection risks as the skill ingests and summarizes external news data via the
ticker.newsAPI. - Ingestion points: External news headlines are retrieved from
ticker.newsinSKILL.mdandreferences/api_reference.md. - Boundary markers: None present; the skill does not use delimiters or specific instructions to ignore malicious content embedded within the fetched headlines.
- Capability inventory: The skill environment allows for Python code execution and shell command execution via
subprocess. - Sanitization: No validation, filtering, or escaping is performed on the news data before it is presented in the final summary.
Audit Metadata