wash-sale-detection
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a utility for analyzing crypto trade history under 2025 US tax rules. The implementation uses standard Python libraries for data processing and CLI reporting with no signs of malicious behavior or unexpected capabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external trade history from CSV files, creating a potential ingestion surface, though it lacks the capabilities to be exploited.\n
- Ingestion points: The
load_trades_from_csvfunction inscripts/wash_sale_scanner.pyreads user-provided files.\n - Boundary markers: Structured CSV schema and strict type conversion for dates and quantities provide structural boundaries.\n
- Capability inventory: The skill is limited to terminal output and numerical calculations; it contains no network operations, file-write capabilities, or shell execution paths across its scripts.\n
- Sanitization: Basic data validation is performed during CSV parsing via float and date type casting.
Audit Metadata