china-pitch-deck
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial data from well-known and reputable Chinese financial services, including Wind, iFind, AkShare, and Juchao (Cninfo). These are industry-standard sources for the data required by the skill's primary purpose.
- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) because it processes untrusted external data from corporate websites and brokerage reports. Ingestion points: External research reports and company investor relations materials are gathered in Step 2 of the workflow. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic. Capability inventory: The skill uses data retrieval functions like
get_financialsandget_stock_infoto populate templates; no dangerous file-system write or shell execution capabilities are mentioned in the SKILL.md. Sanitization: No explicit sanitization or validation of external text content is defined.
Audit Metadata