saas-analyzer

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute specific Python scripts included in the repository to perform financial analysis.
  • Evidence: SKILL.md defines workflows for running scripts/metrics_calculator.py, scripts/quick_ratio_calculator.py, and scripts/unit_economics_simulator.py using user-supplied metrics as command-line arguments.
  • Analysis: The scripts are part of the skill package and perform deterministic mathematical operations. They do not exhibit behaviors such as subprocess spawning or shell command construction from raw strings.
  • [SAFE]: The skill implements robust input sanitization through script architecture.
  • Evidence: All Python scripts (scripts/metrics_calculator.py, etc.) utilize the argparse module with strict type definitions (type=float, type=int) for all user-controlled parameters.
  • Analysis: This architecture prevents command injection and schema confusion by ensuring that the agent can only pass validated numerical data to the calculation logic. Additionally, the skill operates entirely with local resources and standard libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 12:27 PM
Security Audit — agent-trust-hub — saas-analyzer