finance-skills
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements financial modeling and analysis tools (DCF valuation, ratio analysis, budget variance, and forecasting) using static Python scripts. All scripts, including
ratio_calculator.py,dcf_valuation.py, andforecast_builder.py, use the Python standard library exclusively and operate on local files provided via command-line arguments. No remote code execution or network exfiltration patterns were identified. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process financial data from users and local JSON files. This ingestion surface is used for structured mathematical analysis and reporting. The potential for indirect prompt injection is mitigated by the numeric nature of the processing and the scoped advisory instructions provided to the agent.
- [EXTERNAL_DOWNLOADS]: The documentation provides an installation instruction for
agent-skills-clito fetch the skill from the vendor's repository (alirezarezvani/claude-skills). This refers to the vendor's own distribution channel and is documented neutrally as a setup step.
Audit Metadata