margin-decomposition
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/margin_decomp.py) to process financial data. The script uses standard libraries and performs purely mathematical calculations. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads from a user-provided configuration file (
--config margin.json) containing revenue and margin data. No sensitive system files, credentials, or environment variables are accessed. - [REMOTE_CODE_EXECUTION]: No remote code is downloaded or executed. All logic is contained within the local script.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied revenue and margin data. While this is an ingestion point for untrusted data, the script only performs numerical operations and does not interpolate the data into prompts or execute it as code.
Audit Metadata