alphagbm-company-profile
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs network operations via REST API calls to
https://alphagbm.zeabur.appandhttps://alphagbm.comto manage profile data and retrieve valuation history. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external data from the AlphaGBM API, including AI-generated summaries and financial event descriptions.
- Ingestion points: External data enters the agent context via API response fields such as
ai_profile_summary,financial_red_flags, andevent_radardefined in SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the skill definition.
- Capability inventory: The skill is limited to performing authenticated HTTP requests (GET, POST, DELETE) to the vendor's API; no local file system writes, shell execution, or subprocess capabilities were identified.
- Sanitization: No explicit sanitization or validation of the API-provided text is described in the skill instructions.
Audit Metadata