yc-default-alive-calculator
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs purely mathematical financial projections based on user-supplied parameters (revenue, burn, cash, growth). It uses only the Python standard library (
argparse,json) and contains no network, file, or system-level operations. - [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface via command-line arguments. However, this is classified as safe because:
- Ingestion points: Data enters the script via CLI flags (
--monthly-revenue, etc.) inscripts/default-alive.py. - Boundary markers: Not applicable as the data is treated as numerical inputs for calculation rather than natural language instructions.
- Capability inventory: The script has no capabilities to write files, make network requests, or execute arbitrary code.
- Sanitization: Inputs are explicitly cast to
floatand validated for valid ranges (e.g., non-negative values) before processing, preventing them from influencing the agent's logic flow.
Audit Metadata