rental-yield-calculator-skill
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches property transaction, rental data, and geographical information from trusted Singapore government domains (api.data.gov.sg, api-open.data.gov.sg, and onemap.gov.sg). These are the primary intended data sources for the skill's functionality.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill optionally reads an API key from the DATA_GOV_SG_API_KEY environment variable, which is the recommended method for sensitive configuration.
- [COMMAND_EXECUTION]: No suspicious command execution or shell injection vectors were identified. The core logic uses standard Python libraries for calculation and data processing.
- [SAFE]: The dynamic module loading (importlib.import_module) identified by static analysis is restricted to the test suite (tests/test_rental_yield.py) and is used for standard test isolation and module reloading purposes.
Audit Metadata