capital-allocation

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a structured workflow for financial research and reporting. All external data access (market data, financial metrics, and SEC filings) is consistent with the skill's stated purpose of capital allocation analysis.
  • [COMMAND_EXECUTION]: The skill utilizes the discover_companies tool for ticker lookups, which is a standard internal function for company identification.
  • [DATA_EXPOSURE]: The skill generates and saves an HTML report to the reports/ directory. The report includes financial data and direct links to the vendor's source platform (daloopa.com), which is considered a legitimate vendor resource for this author.
  • [PROMPT_INJECTION]: The skill includes instructions to process external SEC filings. While this constitutes an ingestion surface for potential indirect prompt injection, the instructions are focused on extraction and citation of specific financial policies, and the skill does not grant elevated privileges based on this data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 07:46 PM
Security Audit — agent-trust-hub — capital-allocation