compute-precious-miner-gross-margin

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches metal price data from Yahoo Finance via the yfinance library and references official financial data sources including the LBMA and the SEC EDGAR database. These are well-known and trusted entities for financial and commodity data, and their use is consistent with the skill's primary function.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external sources such as corporate quarterly reports and news releases to extract All-In Sustaining Cost (AISC) metrics (Ingestion Points: news releases, IR presentations). This represents an indirect prompt injection surface. However, the risk is mitigated as the skill employs strict regular expression patterns to isolate specific numeric values (Sanitization/Boundary Markers: targeted regex for cost extraction), and its execution capabilities are restricted to mathematical processing and data reporting (Capability Inventory: numeric calculations, CLI output).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:33 PM