portfolio-review
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script located at
tools/financial_rigor.pywith subcommands such asverify-valuationandthree-scenarioto perform financial arithmetic and valuation checks. This is a core part of its functionality for ensuring data accuracy. - [EXTERNAL_DOWNLOADS]: The skill uses a
WebSearchagent to retrieve real-time market data, including stock prices, valuation multiples, and recent financial news from the internet. - [DATA_EXFILTRATION]: The skill reads from and writes to a local file named
reports/portfolio-latest.mdto maintain a persistent record of the user's portfolio and analysis results. It instructions the agent to update this file during the execution flow. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes untrusted data from both user input ($ARGUMENTS) and external web search results.
- Ingestion points: Data enters the context through user-provided portfolio descriptions and external content retrieved via the WebSearch tool.
- Boundary markers: None explicitly defined in the instructions; the agent relies on structured markdown tables for data processing.
- Capability inventory: The agent can execute shell commands (running the local financial tools) and write to local files (the portfolio report).
- Sanitization: No explicit sanitization or filtering logic is defined within the skill instructions for external content.
Audit Metadata