tres-rollup-rules

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [GraphQL and Tool Execution]: The skill uses a dedicated MCP connector for executing GraphQL queries and mutations. It includes a specific validation step (validate_query) and a quality gate (tres-rollup-review skill) to ensure accuracy before presenting results or performing actions.
  • [External Source Integration]: The skill references a local HTML template and external Google Fonts, which are standard for generating human-readable reports within the agent's environment.
  • [Data Aggregation Strategy]: The instructions emphasize the use of aggregations over fetching full result sets to keep the processing context efficient and minimize data exposure.
  • [User Oversight]: A multi-step approval process is enforced. The skill is designed to propose rules via a generated HTML report and a markdown table, requiring the user to explicitly approve specific rule numbers before the createSubTransactionRollupRules mutation is ever called.
  • [Persistence via Platform Features]: The skill utilizes the TRES Finance platform's native rollup rule mechanism. While these rules affect how data is viewed and integrated into ERPs, they are described as non-destructive and managed through the platform's standard audit trails (e.g., setting createdBy: 'AI').
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:44 AM
Security Audit — agent-trust-hub — tres-rollup-rules