buy-side-equity-research-memo
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
edgartoolsPython package (installed viapip install edgartools). This is a well-known, community-standard library used for accessing the US SEC EDGAR database. It is a legitimate dependency for the skill's stated purpose of financial analysis. - [COMMAND_EXECUTION]: The skill contains Python code snippets demonstrating how to use the
edgarlibrary. These are provided as usage examples for the agent to retrieve financial statements (10-K, 10-Q) and do not contain malicious payloads. - [PROMPT_INJECTION]: The skill processes untrusted external data such as SEC filings, earnings call transcripts, and investor presentations. This represents an indirect prompt injection surface.
- Ingestion points: External financial documents and transcripts are ingested during the workflow (defined in
SKILL.md). - Boundary markers: The instructions mandate a 'Source Discipline' section, requiring the agent to cite sources and explicitly mark unverified data with
未核验(Unverified). - Capability inventory: The skill uses network operations via the
edgarpackage to fetch documents from the SEC website. - Sanitization: The skill includes strict guidelines to distinguish between reported facts, management guidance, and analyst inference, which serves as a logical control against data poisoning.
Audit Metadata