portfolio-risk-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a structured decision-support tool. It defines clear roles, routing logic, and output formats for financial analysis without requesting dangerous permissions or executing sensitive commands.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user, including portfolio snapshots and catalyst information. While this creates a potential injection surface, the skill does not have access to tools that perform file system writes, network requests to unknown domains, or arbitrary code execution, effectively mitigating the risk of exploitation.
- Ingestion points: Reads portfolio snapshots, account details, and catalyst info via the 'Inputs and context' section in
SKILL.md. - Boundary markers: None identified.
- Capability inventory: No subprocess calls, network operations, or file-write capabilities are requested or used.
- Sanitization: None specified.
Audit Metadata