Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The skill uses Bash and WebFetch against arbitrary user-supplied URLs; fetched HTML, robots.txt, and headers are untrusted and could contain prompt-injection or malicious instructions.
• SKILL.md does not include an explicit setup/prerequisites section or a dedicated limitations section covering JS-rendered SPAs, bot protection, paywalls, or rate limits.
• The Write permission is broad; the workflow only needs to create the audit report, but no explicit constraint is documented for output paths or file handling.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The skill uses Bash and WebFetch against arbitrary user-supplied URLs; fetched HTML, robots.txt, and headers are untrusted and could contain prompt-injection or malicious instructions.
• SKILL.md does not include an explicit setup/prerequisites section or a dedicated limitations section covering JS-rendered SPAs, bot protection, paywalls, or rate limits.
• The Write permission is broad; the workflow only needs to create the audit report, but no explicit constraint is documented for output paths or file handling.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The skill uses Bash and WebFetch against arbitrary user-supplied URLs; fetched HTML, robots.txt, and headers are untrusted and could contain prompt-injection or malicious instructions.
• SKILL.md does not include an explicit setup/prerequisites section or a dedicated limitations section covering JS-rendered SPAs, bot protection, paywalls, or rate limits.
• The Write permission is broad; the workflow only needs to create the audit report, but no explicit constraint is documented for output paths or file handling.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Financial research output is not financial advice; require human review before any live investment decision
• Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
• The skill uses Bash and WebFetch against arbitrary user-supplied URLs; fetched HTML, robots.txt, and headers are untrusted and could contain prompt-injection or malicious instructions.
• SKILL.md does not include an explicit setup/prerequisites section or a dedicated limitations section covering JS-rendered SPAs, bot protection, paywalls, or rate limits.
• The Write permission is broad; the workflow only needs to create the audit report, but no explicit constraint is documented for output paths or file handling.
• Financial research output is not financial advice; require human review before any live investment decision.
• This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
• Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.