algo-risk-altman-z
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external financial data provided by the user or via a JSON file.
- Ingestion points: The
scripts/altman_z.pyscript ingests data through command-line arguments (usingargparse) or by reading a JSON file via the--inputflag. - Boundary markers: The skill relies on structured input formats (floats and specific JSON keys) to delineate data from instructions.
- Capability inventory: The script is limited to local arithmetic calculations and console output. It does not perform network operations, subprocess executions, or file system writes.
- Sanitization: The script employs type validation via
argparse(enforcing float types) and includes basic logic checks to ensure critical inputs liketotal_assetsare positive. Due to the limited capabilities of the script, the risk of indirect injection is negligible. - [COMMAND_EXECUTION]: The skill uses a Python script to perform calculations. The script is static, uses standard libraries (
argparse,json,sys), and does not take user-controlled input into shell commands or dangerous functions likeeval()orexec().
Audit Metadata