trader-budget
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious behaviors were detected. The skill performs localized financial calculations for budget management.
- [DATA_EXPOSURE]: The skill reads and writes local configuration and target files (
trader/config.json,trader/targets.json,trader/orders.json). These operations are restricted to the local file system and are necessary for the skill's intended functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes portfolio and price data from potentially external sources.
- Ingestion points:
trader/targets.json,trader/prices.json, andtrader/config.json. - Boundary markers: Not explicitly defined in the script's input parsing.
- Capability inventory: File system write access to create proposed orders in
trader/orders.json. - Sanitization: The script implements strict numeric type casting (floats and integers) and validates JSON structures, which prevents the interpretation of malicious payloads within the data inputs.
Audit Metadata