investor-recent-investments
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the 'orth' CLI tool to execute queries against the 'fundable' API service. This is a standard use of the vendor's own infrastructure to provide the skill's core functionality.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes external data from API responses. In this context, the risk is negligible as the data is structured financial information.\n
- Ingestion points: Data returned from the investor search and companies endpoints in SKILL.md.\n
- Boundary markers: None specified.\n
- Capability inventory: Shell command execution via the 'orth' CLI tool.\n
- Sanitization: No explicit sanitization or filtering of the API-returned content is mentioned in the skill instructions.
Audit Metadata