scanner-pmcc
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the yfinance library to retrieve market data from Yahoo Finance. This is a standard and expected behavior for a financial scanning utility.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests ticker symbols and company metadata (such as descriptions) from external sources or user-provided files, which are then used to populate a structured markdown report. The ingestion surface is limited to reporting, and the skill lacks capabilities that could be exploited by malicious payloads in these fields.
Audit Metadata