stockbee-episodic-pivot-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script connects to
financialmodelingprep.comto retrieve historical stock price data and company profiles. This is a well-known financial data service, and the data retrieval is a core component of the skill's stated functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes news headlines and summaries provided in external JSON files to score catalyst quality. This represents an indirect prompt injection surface as the untrusted content is included in generated reports.
- Ingestion points: The
events-jsonandearnings-jsonarguments inanalyze_ep.pyprovide the text for analysis. - Boundary markers: The data is parsed from structured JSON, but individual text fields are not enclosed in delimiters to prevent the agent from interpreting instructions within the news content.
- Capability inventory: The skill is restricted to making specific financial API calls and writing JSON/Markdown reports to a user-defined directory.
- Sanitization: Headlines and summaries are processed via regular expressions for scoring and then written to reports without additional sanitization.
Audit Metadata