risk-management
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides scripts (
scripts/drawdown_analyzer.pyandscripts/risk_dashboard.py) that ingest external JSON files (equity_data.jsonandpositions.json) for risk assessment. While this represents a data ingestion surface, the scripts are limited to mathematical calculations and console output. They lack dangerous capabilities such as network operations, file system modifications, or shell command execution, ensuring that even untrusted input cannot trigger malicious side effects. - [EXTERNAL_DOWNLOADS]: The
scripts/drawdown_analyzer.pyfile identifiesnumpyas a dependency for its numerical calculations.numpyis a standard, well-known library for scientific computing and does not represent a security risk in this context.
Audit Metadata