The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches financial data, company metadata, and filing documents from official U.S. government domains (sec.gov and data.sec.gov). These are established, well-known services for regulatory information.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external SEC filings. While this constitutes an ingestion surface for untrusted data, the source is an official regulatory body and the data is processed into structured JSON, which significantly reduces the risk of malicious instruction execution.
[COMMAND_EXECUTION]: No evidence of arbitrary command execution or shell spawning was found. The bundled scripts perform standard data manipulation and HTTP request management.

sec-edgar