trade-risk
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
execute_codetool to perform complex financial calculations in a Python environment, specifically for position sizing, Kelly Criterion, and Value at Risk (VaR). This functionality is limited to standard mathematical operations and is central to the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external web searches to inform its risk assessment model, creating a theoretical attack surface.
- Ingestion points: Search results for volatility, drawdowns, correlation, liquidity, and fundamentals as specified in the Data Collection section of
SKILL.md. - Boundary markers: None identified.
- Capability inventory: The skill uses
execute_code(Python) and has the ability to write analysis reports to the filesystem. - Sanitization: No explicit validation or sanitization of external search data is instructed before the data is used to populate variables in the Python execution environment.
Audit Metadata