saas-metrics-coach
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
scripts/metrics_calculator.py,scripts/quick_ratio_calculator.py, andscripts/unit_economics_simulator.py) using thepythoninterpreter to perform financial calculations. These scripts use only standard Python libraries and process data passed via command-line arguments. - [DATA_EXPOSURE]: The skill is designed to ingest and analyze sensitive business data provided by the user, such as Monthly Recurring Revenue (MRR), churn rates, and marketing spend. Analysis of the scripts and instructions shows no attempts to access unauthorized system files (e.g., SSH keys, environment variables) or exfiltrate the provided data to external servers.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input which could theoretically contain malicious instructions. However, the data is primarily passed as numeric arguments to specialized calculation scripts that do not execute arbitrary commands, significantly limiting the risk of indirect injection attacks.
Audit Metadata