The Agent Skills Directory

[SAFE]: No malicious patterns were detected. The skill provides clear instructions for using specific, named CLI tools (sec-filings, pdftext) to process publicly available financial documents.
[INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests untrusted external data from SEC filings. However, the risk is minimized by the use of specialized parsing tools and explicit instructions to work within a restricted /tmp directory. The data source (SEC EDGAR) is a reputable regulatory repository, further reducing the likelihood of adversarial content.
[COMMAND_EXECUTION]: The skill utilizes the bash tool, but it does so to run specific, pre-installed binaries (sec-filings and pdftext) rather than arbitrary or user-supplied shell scripts. This is consistent with the skill's intended purpose.

sec-filings