funding-signal-play
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for sales outreach and a benign Python script for basic text validation. No malicious patterns across any threat categories were detected.
- [EXTERNAL_DOWNLOADS]: The skill references official sources such as the SEC EDGAR database (sec.gov) for monitoring Form D filings. These references target well-known, trusted government services and do not involve executable code downloads.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves analyzing external data (news, SEC filings, LinkedIn). While this represents a potential surface for indirect injection, the skill is primarily an informational playbook and does not automate the ingestion of untrusted data in a way that could compromise the agent's execution environment. Severity is low/safe.
- [COMMAND_EXECUTION]: The provided script
scripts/check-output.pyis a simple text linter that reads a local file to check for specific keywords. It performs no network operations, file modifications, or elevated commands.
Audit Metadata