earnings-signal-play
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data from sources such as SEC EDGAR filings and earnings call transcripts. This introduces a surface for indirect prompt injection where malicious instructions could be embedded in the source material.
- Ingestion points: Research processes defined in Phase 1 (SEC filings) and Phase 2 (Earnings call mining) in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters (e.g., XML tags or triple quotes) or 'ignore embedded instructions' directives when processing the external text.
- Capability inventory: The skill is limited to analysis and outreach generation; the included Python script (scripts/check-output.py) is a static validator and does not execute untrusted code or perform network operations.
- Sanitization: No specific data sanitization or structural validation of the external content is implemented before processing.
Audit Metadata