The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documentation instructs the user to execute shell commands using npx, bunx, or pnpm dlx to install the skill and the required octagon-mcp server. Specifically, it provides commands to set environment variables and run tools.
[EXTERNAL_DOWNLOADS]: The skill installation and setup procedures fetch the skills package and the octagon-mcp tool from the npm registry. These resources are provided by the vendor, OctagonAI.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from external SEC filings (10-K and 10-Q) and financial web searches, creating a potential surface for instructions embedded in external documents to influence the agent.
Ingestion points: The octagon-agent tool retrieves data from SEC filings and financial websites as specified in SKILL.md.
Boundary markers: The instructions do not define explicit boundary markers or delimiters for the external data being processed.
Capability inventory: The skill uses the octagon-agent tool, which has capabilities for market intelligence, financials, and web search retrieval.
Sanitization: There is no description of sanitization or validation logic for the ingested financial data.

sec-cash-flow-review