vedic-calculator

Warn

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/setup_env.py script uses subprocess.run to manage the Python environment, creating virtual environments and invoking the pip package manager. It also executes a dynamically defined Python snippet via the -c flag to handle file system operations and data verification.
  • [EXTERNAL_DOWNLOADS]: The environment setup script downloads astronomical ephemeris data (.se1 files) from astro.com (Astrodienst) to satisfy requirements for the Swiss Ephemeris engine.
  • [REMOTE_CODE_EXECUTION]: The skill automates the installation and execution of multiple third-party libraries from the Python Package Index (PyPI). This includes niche astrology libraries such as PyJHora and dashaflow, which are loaded and executed as part of the core calculation engine.
  • [DYNAMIC_EXECUTION]: Several components, including scripts/ashtakavarga_pyjhora.py and scripts/engine.py, dynamically modify the Python sys.path at runtime to locate and load modules from the local filesystem.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 21, 2026, 07:37 AM
Security Audit — agent-trust-hub — vedic-calculator