risk-portfolio-manager
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local TypeScript scripts designed for financial modeling and risk analysis. These scripts, such as
position-sizer.tsandrisk-metrics.ts, are called vianpx tsxwith specific arguments to process portfolio data. - [EXTERNAL_DOWNLOADS]: The skill is configured to retrieve market and protocol data from established financial platforms including DeFiLlama, DexScreener, and Birdeye. These references are limited to specific, well-known domains for the purpose of market analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill handles data from external market providers and user-supplied portfolio files. It addresses potential injection surfaces by using structured TypeScript interfaces (e.g.,
PositionSizeRequest,PortfolioRisk) to validate and scope data before it is used in calculations or recommendations. Specifically, ingestion occurs via WebFetch and portfolio files; boundary markers are established by the interface structures; capabilities are limited to local script execution and state alerts; and sanitization is managed through structural validation.
Audit Metadata