earnings-competitive-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the Octagon MCP server using
npx, which is a standard procedure for using Model Context Protocol tools provided by the vendor. - [EXTERNAL_DOWNLOADS]: Setup documentation includes the official Homebrew installation script from GitHub, a well-known and trusted source, as part of the system prerequisites.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external earnings call transcripts. While this presents an attack surface where instructions could be embedded in transcripts, the skill's primary function is data analysis and extraction without execution of the parsed content, posing a minimal risk handled by standard AI safety guardrails.
- [COMMAND_EXECUTION]: Installation instructions involve shell commands for configuring MCP servers in environments like Cursor and Claude Desktop. These commands are standard for enabling tool-use capabilities and are scoped to the vendor's official package (
octagon-mcp).
Audit Metadata