esg-ratings
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides the standard command to fetch and execute the Homebrew installation script from its official GitHub repository.
- [REMOTE_CODE_EXECUTION]: Instructions guide the user to execute the
octagon-mcppackage usingnpxto configure the required MCP server environment. - [INDIRECT_PROMPT_INJECTION]: The skill relies on data retrieved from external financial agents (MSCI, Sustainalytics), which introduces an inherent surface for indirect prompt injection if the source data were to contain malicious instructions, though this is standard for data retrieval tasks.
Audit Metadata