trader-budget

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats or malicious behaviors were detected. The skill performs localized financial calculations for budget management.
  • [DATA_EXPOSURE]: The skill reads and writes local configuration and target files (trader/config.json, trader/targets.json, trader/orders.json). These operations are restricted to the local file system and are necessary for the skill's intended functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes portfolio and price data from potentially external sources.
  • Ingestion points: trader/targets.json, trader/prices.json, and trader/config.json.
  • Boundary markers: Not explicitly defined in the script's input parsing.
  • Capability inventory: File system write access to create proposed orders in trader/orders.json.
  • Sanitization: The script implements strict numeric type casting (floats and integers) and validates JSON structures, which prevents the interpretation of malicious payloads within the data inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 05:50 AM