dcf-model-builder
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Internal Module Loading: The skill utilizes a custom loader in
scripts/runtime_loader.pyto execute its core workbook generation logic. This mechanism is used to load the skill's own internal components and is a standard way to manage complex, multi-file execution within the plugin environment. - Data Ingestion Surface: The skill processes external financial data via
plan.jsonfiles. To mitigate risks associated with untrusted data, the skill includes structural validation logic inscripts/plan_validation.pyand employs data escaping inscripts/xlsx_writer.pywhen constructing XML for the final Excel workbooks. - Subprocess Execution: The skill provides instructions for running localized Python scripts to handle context preflight and workbook building. These operations are performed on local files using the skill's own provided scripts, following a controlled workflow.
Audit Metadata