pnl-attribution

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/pnl_attribution_diagnostics.py) to process data. This is an intended function of the skill for performing P&L diagnostics.
  • [EXTERNAL_DOWNLOADS]: The skill requires the pandas library for data manipulation. This is a standard, well-known dependency for financial and quantitative analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from a user-supplied input.csv.
  • Ingestion points: The file scripts/pnl_attribution_diagnostics.py reads the CSV file via pandas.read_csv.
  • Boundary markers: None identified.
  • Capability inventory: The script performs numerical calculations and writes the results to a local JSON file.
  • Sanitization: The script uses pd.to_numeric(errors="coerce") to ensure data is treated numerically, which prevents the data from being interpreted as instructions or strings in a way that could influence subsequent LLM prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 08:45 AM
Security Audit — agent-trust-hub — pnl-attribution