saas-analyzer
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute specific Python scripts included in the repository to perform financial analysis.
- Evidence:
SKILL.mddefines workflows for runningscripts/metrics_calculator.py,scripts/quick_ratio_calculator.py, andscripts/unit_economics_simulator.pyusing user-supplied metrics as command-line arguments. - Analysis: The scripts are part of the skill package and perform deterministic mathematical operations. They do not exhibit behaviors such as subprocess spawning or shell command construction from raw strings.
- [SAFE]: The skill implements robust input sanitization through script architecture.
- Evidence: All Python scripts (
scripts/metrics_calculator.py, etc.) utilize theargparsemodule with strict type definitions (type=float,type=int) for all user-controlled parameters. - Analysis: This architecture prevents command injection and schema confusion by ensuring that the agent can only pass validated numerical data to the calculation logic. Additionally, the skill operates entirely with local resources and standard libraries.
Audit Metadata