batch-market-cap
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The setup instructions guide users to execute the octagon-mcp package from the npm registry using npx. This is a standard deployment method for the vendor's MCP server.
- [EXTERNAL_DOWNLOADS]: The documentation references the official Homebrew installation script (raw.githubusercontent.com/Homebrew/install) as a prerequisite for macOS environments.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to configure the MCP server and set environment variables for API key management.
- [INDIRECT_PROMPT_INJECTION]: The skill processes ticker symbols provided in prompts to perform financial data lookups.
- Ingestion points: Ticker symbols passed to the prompt argument in SKILL.md.
- Boundary markers: None present in example queries.
- Capability inventory: The octagon-agent tool performs network-based financial data retrieval.
- Sanitization: Relies on the underlying MCP server to validate ticker inputs.
Audit Metadata