form-d-raises
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external SEC Form D filings, which is a potential surface for indirect prompt injection if filings contain malicious instructions.
- Ingestion points: SEC filing data fetched via the
fundingcommand (SKILL.md). - Boundary markers: Instructions do not include delimiters or 'ignore' headers for external content.
- Capability inventory: Uses
bashto runfundingandoutreachcommands (SKILL.md). - Sanitization: No sanitization or escaping of the retrieved data is mentioned.
Audit Metadata