cost-basis-engine
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is implemented in
scripts/cost_basis_calculator.py, which uses only Python standard libraries such asargparse,copy,sys,dataclasses,datetime, andtyping. No external or untrusted dependencies are required. - [SAFE]: Analysis of all scripts confirms there are no network operations, sensitive file system accesses, or command execution patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a surface for ingesting untrusted trade data. 1. Ingestion points:
Tradeobjects andadd_buy/add_sellmethods inscripts/cost_basis_calculator.py. 2. Boundary markers: Absent. 3. Capability inventory: Purely mathematical/computational logic within the Python script. 4. Sanitization: Absent. As the skill does not interpolate data into agent prompts and lacks exploitable capabilities like network or shell access, this surface is evaluated as safe. - [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were found in the skill instructions or supporting scripts.
Audit Metadata