cost-density-net-rr-calculator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implementation consists of pure mathematical logic for calculating risk-reward ratios and cost density. The provided Python and TypeScript scripts do not perform any sensitive operations, such as file system access, network communication, or dynamic code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided trading parameters to generate qualitative strategy recommendations, which creates a potential surface for indirect prompt injection. However, this is mitigated by the skill's primary purpose and input constraints.
- Ingestion points: User inputs for parameters (RR_g, P, c, s, V, R) in the intake workflow.
- Boundary markers: The workflows do not use specific delimiters or warnings to isolate untrusted input data from instructions.
- Capability inventory: The skill employs Python execution for calculations and agent-generated interpretation for advice.
- Sanitization: The input schema enforces numerical types for all critical parameters, preventing the ingestion of text-based malicious instructions.
Audit Metadata