investment-memo-writer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates downloads of the 'markdown' and 'docx' libraries via pip and installs the 'investment-memo-writer' package from the well-known registry 'clawhub'. These downloads are from trusted or well-known sources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes research notes and structured JSON data provided by the user. Maliciously crafted input could theoretically attempt to influence the agent's summarizing behavior, though risk is minimized by the structured nature of the template.
Audit Metadata