position-sizer

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a self-contained utility for calculating financial metrics (Fixed Fractional, ATR-based, and Kelly Criterion). It does not request any sensitive permissions or access external networks.
  • [COMMAND_EXECUTION]: Usage of subprocess.run in scripts/tests/test_position_sizer.py is restricted to the test suite for verifying the command-line interface of the skill's own main script. The commands are constructed using sys.executable and static local paths, posing no risk of arbitrary execution.
  • [EXTERNAL_DOWNLOADS]: The skill does not define any external dependencies in its configuration and explicitly states it requires 'Python 3.9+ with standard library only' in its prerequisites.
  • [DATA_EXFILTRATION]: No network-enabled tools or libraries are used. The reports generated (JSON and Markdown) are saved to a local reports/ directory with no mechanisms for remote exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 07:30 AM
Security Audit — agent-trust-hub — position-sizer