thesis-tracker
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local utility
tools/financial_rigor.pyto perform valuation verification. This tool is part of the repository's provided environment. - [EXTERNAL_DOWNLOADS]: The skill utilizes web search capabilities to fetch external financial data, earnings reports, and news. This is the intended primary function for tracking investment facts.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes untrusted content from web searches and local files.
- Ingestion points: Web search results and existing reports in
reports/{公司名}-thesis.md. - Boundary markers: None identified; external content is interpolated directly into the reasoning process.
- Capability inventory: Subprocess execution of
tools/financial_rigor.pyand file-write operations to thereports/directory. - Sanitization: No explicit sanitization or instruction to ignore embedded commands is present in the skill markdown.
Audit Metadata