gf-dma-health-index
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the 'edgartools' library from the official PyPI registry and retrieves financial data from well-known providers including Yahoo Finance, TradingView, and the SEC. These are trusted sources appropriate for the skill's financial analysis purpose.
- [COMMAND_EXECUTION]: The skill provides instructions for installing dependencies using standard package managers (pip, uv). These operations are transparently disclosed and necessary for the intended functionality of accessing SEC filings.
- [PROMPT_INJECTION]: The skill processes external, unstructured text from SEC filings and analyst reports, presenting a surface for indirect prompt injection. Evidence Chain: 1. Ingestion points: SEC 10-K, 10-Q, 8-K filings and consensus estimates. 2. Boundary markers: Absent. 3. Capability inventory: The skill is limited to mathematical calculations and textual summary generation. 4. Sanitization: No specific filtering or escaping of external content is mentioned. The risk is considered low due to the limited capabilities of the skill.
Audit Metadata