earnings-capital-allocation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the official Homebrew installation script from GitHub's raw content domain, which is a standard procedure for macOS package management.
- [COMMAND_EXECUTION]: The skill instructs the user to run the Octagon MCP server using npx. This tool is provided by the skill's author (octagonai) to facilitate the analysis of earnings transcripts.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Processes earnings transcripts from external sources via the Octagon MCP server as described in SKILL.md.
- Boundary markers: Uses specific natural language prompts to guide extraction but lacks explicit delimiters or instructions to ignore embedded commands in the source data.
- Capability inventory: The skill relies on the Octagon MCP server for analysis; no direct file system writes or arbitrary network operations are defined in the skill's own instructions.
- Sanitization: No explicit sanitization or filtering of the transcript content is performed within the skill instructions.
Audit Metadata