risk-metrics-calculation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard mathematical implementations for financial portfolio risk analysis. The code logic is transparent and matches the stated purpose of calculating metrics like volatility, drawdowns, and risk-adjusted returns.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect injection by processing external financial return series and historical datasets. However, the impact is non-existent as the skill lacks any dangerous capabilities such as network operations, file system writes, or shell execution.
  • Ingestion points: returns (Series/DataFrame) and historical_data (DataFrame) processed by the RiskMetrics and StressTester classes.
  • Boundary markers: Not present.
  • Capability inventory: None. The skill's logic is restricted to local statistical computation.
  • Sanitization: Data is coerced into numeric NumPy/Pandas types, providing inherent validation against non-numeric injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 12:59 PM