portfolio
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash script (
scripts/script.sh) which serves as a wrapper around embedded Python code. It dispatches commands for adding/removing positions and performing financial calculations using the Python standard library. - [SAFE]: All investment data is stored locally in the user's home directory (
~/.portfolio/). The skill explicitly avoids making external API calls or network requests, which is consistent with its stated purpose of local portfolio management. - [SAFE]: Input handling for numeric fields (quantity, price) includes conversion to floating-point numbers in Python, providing a basic layer of data validation before the values are saved to the local database.
- [SAFE]: The skill does not use any third-party packages or remote scripts, relying solely on standard system utilities (bash, python3) available in common development environments.
Audit Metadata