vcp-screener

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches S&P 500 company data from the well-known datasets organization on GitHub and market prices from the Financial Modeling Prep (FMP) API. These are trusted and common sources for financial information.
  • [COMMAND_EXECUTION]: Implements command-line functionality for screening. The skill includes robust input validation via a regular-expression-based ticker sanitization function to prevent command injection or path traversal through user-supplied symbols.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external APIs. While this constitutes an attack surface, the risk is mitigated by the structured handling of numerical data and input sanitization, preventing the agent from executing external content as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 06:18 AM