risk-management

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides scripts (scripts/drawdown_analyzer.py and scripts/risk_dashboard.py) that ingest external JSON files (equity_data.json and positions.json) for risk assessment. While this represents a data ingestion surface, the scripts are limited to mathematical calculations and console output. They lack dangerous capabilities such as network operations, file system modifications, or shell command execution, ensuring that even untrusted input cannot trigger malicious side effects.
  • [EXTERNAL_DOWNLOADS]: The scripts/drawdown_analyzer.py file identifies numpy as a dependency for its numerical calculations. numpy is a standard, well-known library for scientific computing and does not represent a security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:59 PM