thesis-tracker

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local utility tools/financial_rigor.py to perform valuation verification. This tool is part of the repository's provided environment.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes web search capabilities to fetch external financial data, earnings reports, and news. This is the intended primary function for tracking investment facts.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted content from web searches and local files.
  • Ingestion points: Web search results and existing reports in reports/{公司名}-thesis.md.
  • Boundary markers: None identified; external content is interpolated directly into the reasoning process.
  • Capability inventory: Subprocess execution of tools/financial_rigor.py and file-write operations to the reports/ directory.
  • Sanitization: No explicit sanitization or instruction to ignore embedded commands is present in the skill markdown.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 01:03 PM
Security Audit — agent-trust-hub — thesis-tracker