dcf-builder
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches financial data and company facts from the official US Securities and Exchange Commission (SEC) EDGAR API (data.sec.gov). This is a well-known and trusted service for public financial data.
- [COMMAND_EXECUTION]: Uses Python to perform discounted cash flow calculations, extract XBRL metrics, and generate file exports. These operations are essential to the skill's primary function and occur within the defined capability scope.
- [PROMPT_INJECTION]: No malicious instruction overrides or safety bypass attempts were detected. The skill includes specific guardrails to prevent the generation of unauthorized investment advice.
- [DATA_EXFILTRATION]: All network operations are directed to legitimate government endpoints for data retrieval. No patterns of sensitive data harvesting or external transmission to unauthorized domains were found.
- [SAFE]: The skill uses standard libraries like 'requests' and 'openpyxl' for its functionality. No obfuscation, persistence mechanisms, or privilege escalation techniques are present.
Audit Metadata