quant-portfolio-risk
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are professional and adhere to safety best practices, explicitly stating that it should default to simulation or paper trading and not perform live transactions without authorization.
- [COMMAND_EXECUTION]: A utility script 'scripts/check_portfolio_constraints.py' is included for validating portfolio weights in CSV format. It uses standard Python libraries and performs local data validation without any dangerous system calls.
- [DATA_EXFILTRATION]: No network-enabled tools or instructions for exfiltrating sensitive data were found. Metadata URLs point to the author's legitimate project repositories on GitHub.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external CSV data via the provided script, the processing is limited to numerical validation and type conversion (float), providing no mechanism for instruction execution from the data content.
Audit Metadata