dcf-model-builder

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Internal Module Loading: The skill utilizes a custom loader in scripts/runtime_loader.py to execute its core workbook generation logic. This mechanism is used to load the skill's own internal components and is a standard way to manage complex, multi-file execution within the plugin environment.
  • Data Ingestion Surface: The skill processes external financial data via plan.json files. To mitigate risks associated with untrusted data, the skill includes structural validation logic in scripts/plan_validation.py and employs data escaping in scripts/xlsx_writer.py when constructing XML for the final Excel workbooks.
  • Subprocess Execution: The skill provides instructions for running localized Python scripts to handle context preflight and workbook building. These operations are performed on local files using the skill's own provided scripts, following a controlled workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 06:12 AM
Security Audit — agent-trust-hub — dcf-model-builder