strategy-business-transition
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external data from listed company reports and announcements, which constitutes a data ingestion surface.\n
- Ingestion points: The workflow involves pulling prospectuses, annual reports, interim reports, and major announcements (SKILL.md, references/idc-transition-markers.md).\n
- Boundary markers: The instructions require the agent to separate facts from interpretation and provide source citations, encouraging grounded analysis.\n
- Capability inventory: The skill is limited to analysis and textual output; it does not possess capabilities for shell execution, file modification, or unauthorized network operations.\n
- Sanitization: No specific sanitization methods are mentioned for the incoming report data, but the analytical nature of the task presents low inherent risk.\n- [EXTERNAL_DOWNLOADS]: The skill directs the agent to retrieve financial data from official Chinese regulatory and exchange portals.\n
- Evidence: References official domains such as cninfo.com.cn (Shenzhen Stock Exchange official disclosure) and sse.com.cn (Shanghai Stock Exchange) in references/idc-transition-markers.md.
Audit Metadata