forex-list
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
octagon-mcptool from the npm registry usingnpx. This is an official resource provided by the skill author (OctagonAI). - [COMMAND_EXECUTION]: Provides instructions for installing Homebrew on macOS using a standard remote script execution command (
curl | bash). This uses a well-known and trusted source. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes tools that scrape and process data from external financial websites, which could potentially contain malicious instructions.
- Ingestion points: External financial data sources and websites accessed via
octagon-scraper-agent(referenced inmcp-setup.md). - Boundary markers: No explicit delimiters are used to separate untrusted external data from the system prompt in the provided example prompts.
- Capability inventory: The skill uses MCP tools to retrieve and process market intelligence and web data.
- Sanitization: No specific sanitization or validation of the retrieved web content is mentioned.
Audit Metadata