stock-fundamental-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow to ingest and process external financial data through various tools (e.g.,
get_company_profile,get_financial_statements). This creates an attack surface for indirect prompt injection where instructions embedded in external data could attempt to influence the agent. - Ingestion points: Tools such as
get_company_profile,get_financial_statements,get_valuation_metrics, andget_shareholdersfetch data from external sources into the agent's context (SKILL.md). - Boundary markers: The skill does not instruct the agent to use specific delimiters or to ignore instructions that might be present in the retrieved content.
- Capability inventory: The skill relies on tools to fetch data and format it into a report template.
- Sanitization: The instructions do not define any sanitization or validation steps for the content returned by the tools.
Audit Metadata