tres-report-create

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [Financial Reporting Workflow]: The skill provides a detailed, step-by-step workflow for creating financial reports, including transaction ledgers and balance sheets. It uses GraphQL via an MCP server to trigger exports and poll for results. This is a standard and safe automation pattern for financial data systems.
  • [Credential Management]: The skill and its associated test script properly handle authentication by reading tokens from environment variables rather than hardcoding them. It also correctly instructs the agent to treat presigned S3 links as sensitive and to format them as clickable markdown to avoid exposing full credentials in chat history.
  • [Data Analysis Practices]: The inclusion of a data analysis step using pandas is consistent with the skill's purpose. The provided Python snippets use standard libraries to process CSV data locally after download.
  • [Test Harness Functionality]: The run_report_matrix.py file is a diagnostic tool designed to verify the connectivity and functionality of the report generation process. It uses standard Python networking libraries (urllib) and does not include any malicious persistence or exfiltration patterns.
  • [Safe Resource Usage]: All identified URLs and services (e.g., ai.tres.finance) are official endpoints for the TRES Finance platform, which matches the skill's stated vendor and purpose. No untrusted third-party dependencies or remote code execution patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:44 AM
Security Audit — agent-trust-hub — tres-report-create