kelly-finance
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate financial modeling utility designed for corporate finance modeling and review. It implements a clear separation between model generation (Python) and the review workspace (Busabase).
- [COMMAND_EXECUTION]: The skill uses
child_process.spawnto execute a bundled, dependency-free Python script (scripts/build_three_statement_model.py) to generate Excel workbooks. The script safely handles data via XML escaping and uses only standard Python libraries. - [EXTERNAL_DOWNLOADS]: Data management is handled through the official
busabase-sdkto interact with Busabase bases, which is the intended infrastructure for this skill. All Node.js dependencies are standard and version-pinned. - [PROMPT_INJECTION]: Instructions in
SKILL.mdand other documentation are strictly operational and contain no patterns of safety bypass or behavioral override. - [DATA_EXFILTRATION]: Sensitive financial data is stored locally in temporary files and synchronized to the user's Busabase space. No network operations targeting untrusted or unknown external domains were identified.
Audit Metadata