merger-model
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes financial data retrieved from external sources like SEC EDGAR and company websites, representing a potential ingestion surface for indirect prompt injection. The risk is minimized by the use of official financial data sources.
- Ingestion points: Data is collected via web search and extraction tools from public financial filings and corporate sites as described in the workflow.
- Boundary markers: No specific delimiters or warnings for external data are specified in the instructions.
- Capability inventory: The skill uses openpyxl for file generation and calls a Python script for workbook recalculation.
- Sanitization: There is no explicit instruction to sanitize the data fetched from external sources before including it in the model.
Audit Metadata