risk-metrics-calculation

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill contains legitimate Python code for financial analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external financial data which represents a theoretical attack surface, though the implementation is safe for numerical analysis.
  • Ingestion points: Data enters via the returns parameter in the RiskMetrics, PortfolioRisk, RollingRiskMetrics, and StressTester classes in resources/implementation-playbook.md.
  • Boundary markers: None present in the provided code samples.
  • Capability inventory: The skill uses NumPy, Pandas, and SciPy for numerical analysis. No subprocess calls, network operations, or file system writes were found in resources/implementation-playbook.md or SKILL.md.
  • Sanitization: No input validation or sanitization of data labels or indices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 08:46 AM
Security Audit — agent-trust-hub — risk-metrics-calculation