skills/mr-kelly/skills/kelly-finance/Gen Agent Trust Hub

kelly-finance

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate financial modeling utility designed for corporate finance modeling and review. It implements a clear separation between model generation (Python) and the review workspace (Busabase).
  • [COMMAND_EXECUTION]: The skill uses child_process.spawn to execute a bundled, dependency-free Python script (scripts/build_three_statement_model.py) to generate Excel workbooks. The script safely handles data via XML escaping and uses only standard Python libraries.
  • [EXTERNAL_DOWNLOADS]: Data management is handled through the official busabase-sdk to interact with Busabase bases, which is the intended infrastructure for this skill. All Node.js dependencies are standard and version-pinned.
  • [PROMPT_INJECTION]: Instructions in SKILL.md and other documentation are strictly operational and contain no patterns of safety bypass or behavioral override.
  • [DATA_EXFILTRATION]: Sensitive financial data is stored locally in temporary files and synchronized to the user's Busabase space. No network operations targeting untrusted or unknown external domains were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 10:36 AM
Security Audit — agent-trust-hub — kelly-finance