supply-chain Audit report.

Warnings

• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• SKILL.md does not include an explicit guardrail telling the agent to treat retrieved SEC/filing/document text as untrusted data; this is a minor prompt-injection hardening gap.
• SKILL.md references contracts/retrieval.md and contracts/citation-and-memory.md, but those contract files are not included in the submitted skill directory excerpt. If they are not present in the repository, the agent may lack required protocol details.
• Knowledge tools such as search_knowledge_entries, get_knowledge_entry, and search_by_analogue are in allowed_tools but are not woven into the main retrieval protocol steps, leaving their intended usage underspecified.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Stars/forks activity: 203 stars, 16 forks; issue activity unavailable in current metadata
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.