position-sizer

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The core functionality of the skill is purely mathematical, operating on user-provided financial data without any requirement for network connectivity or external APIs.\n- [COMMAND_EXECUTION]: The script uses subprocess.run exclusively within its test suite (scripts/tests/test_position_sizer.py) to verify CLI behavior. This is implemented securely by calling the local Python interpreter with a structured list of arguments, posing no risk of shell injection.\n- [SAFE]: The application demonstrates good security hygiene by validating all numerical inputs for correctness in the scripts/position_sizer.py file (e.g., verifying that stop prices are below entry prices for long trades).\n- [SAFE]: File system interaction is restricted to creating a local reports directory and writing output files, which is consistent with the tool's intended utility and follows the principle of least privilege.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 11:52 AM