saas-metrics-coach
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Python scripts (
scripts/metrics_calculator.py,scripts/quick_ratio_calculator.py,scripts/unit_economics_simulator.py) to perform financial calculations. These scripts are provided as part of the skill package and do not require external dependencies or elevated privileges. - [INDIRECT_PROMPT_INJECTION]: The skill ingests raw business numbers from the user.
- Ingestion points: Revenue, customer, and cost data provided by the user in
SKILL.mdStep 1. - Boundary markers: None used in instructions.
- Capability inventory: Local script execution via
python. - Sanitization: The scripts explicitly convert inputs to floats using
float(v), which effectively sanitizes the numeric inputs before calculation, reducing the risk of processing malicious text instructions as data.
Audit Metadata