industry-pe-ratios
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install tools and dependencies from well-known and trusted sources. This includes instructions to download Node.js via Homebrew (Homebrew/install) and to execute the 'octagon-mcp' package using npx. These are standard developer operations from reputable repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill processes financial data retrieved via the 'octagon-agent' tool. While the primary purpose is data retrieval, the ingestion of external data from financial websites or APIs presents a potential surface for indirect prompt injection if the source content contains malicious instructions. The severity is low as the skill is specialized for structured financial data and typically operates within an agent's guardrails.
Audit Metadata