model-finance-chart

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/query_model_finance.py executes the dce command-line utility to retrieve model cost and revenue data. The script utilizes the subprocess.run function with command arguments passed as a list of strings. This approach avoids shell invocation, effectively mitigating potential command injection vulnerabilities.
  • [DATA_EXFILTRATION]: The skill is designed to query financial data and present it to the user. Analysis confirms that all data retrieval is performed via local system calls through the dce tool, with no network activity or transmission to external, unauthorized domains.
  • [SAFE]: The skill utilizes only Python's standard library and does not include any external dependencies, remote script downloads, or dynamic code execution patterns. Its operations are consistent with its stated purpose of generating financial charts from internal business cockpit data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:52 AM
Security Audit — agent-trust-hub — model-finance-chart