position-sizer
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The core functionality of the skill is purely mathematical, operating on user-provided financial data without any requirement for network connectivity or external APIs.\n- [COMMAND_EXECUTION]: The script uses subprocess.run exclusively within its test suite (scripts/tests/test_position_sizer.py) to verify CLI behavior. This is implemented securely by calling the local Python interpreter with a structured list of arguments, posing no risk of shell injection.\n- [SAFE]: The application demonstrates good security hygiene by validating all numerical inputs for correctness in the scripts/position_sizer.py file (e.g., verifying that stop prices are below entry prices for long trades).\n- [SAFE]: File system interaction is restricted to creating a local reports directory and writing output files, which is consistent with the tool's intended utility and follows the principle of least privilege.
Audit Metadata