grad-capm
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions, metadata, and scripts revealed no security threats or malicious intent.
- [COMMAND_EXECUTION]: The included Python script
scripts/capm.pyis used strictly for financial calculations. It utilizes standard library modules (argparse,json) and does not interact with the operating system in a dangerous manner or perform network operations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted financial data for processing, but poses no risk due to the absence of dangerous sinks.
- Ingestion points: External data is ingested via command-line arguments or JSON files in
scripts/capm.py. - Boundary markers: None present; the skill relies on data being formatted as decimals.
- Capability inventory: No subprocess calls, network operations, or file-writing capabilities exist within the scripts.
- Sanitization: Inputs are treated as numerical values for arithmetic calculation only.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file path access, or network exfiltration patterns were detected in the skill files.
Audit Metadata