quarterly-dividend
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for a specific financial data extraction task using a well-known service (Yahoo Finance). The operations, including browser navigation, text extraction via JavaScript, and basic file processing with grep, are aligned with the stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web pages, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill navigates to and extracts data from the Yahoo Finance financials page (SKILL.md, Step 1 and 3).
- Boundary markers: The skill uses specific CSS selectors (
div.tableBody div.row) and labels ("Quarterly", "Dividends Per Share") to target relevant data, which limits the scope of ingested content. - Capability inventory: The agent has access to browser automation (Chrome DevTools), basic shell utilities (Bash, Grep), file reading, and sub-task delegation.
- Sanitization: Data is extracted as text content and parsed into structured markdown tables, which naturally treats the external data as literals rather than executable instructions.
Audit Metadata