stockbee-episodic-pivot-analyzer

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script connects to financialmodelingprep.com to retrieve historical stock price data and company profiles. This is a well-known financial data service, and the data retrieval is a core component of the skill's stated functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes news headlines and summaries provided in external JSON files to score catalyst quality. This represents an indirect prompt injection surface as the untrusted content is included in generated reports.
  • Ingestion points: The events-json and earnings-json arguments in analyze_ep.py provide the text for analysis.
  • Boundary markers: The data is parsed from structured JSON, but individual text fields are not enclosed in delimiters to prevent the agent from interpreting instructions within the news content.
  • Capability inventory: The skill is restricted to making specific financial API calls and writing JSON/Markdown reports to a user-defined directory.
  • Sanitization: Headlines and summaries are processed via regular expressions for scoring and then written to reports without additional sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 05:42 PM
Security Audit — agent-trust-hub — stockbee-episodic-pivot-analyzer