Ledger Plaintext Accounting

• Analyzed: Apr 23, 2026, 2:51 PM
• Findings: 1
• Version: 0.3.3
• Hash: fb1d28145203a97daecff279549933015e967076c9468cd4256590242518fe23
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a highly structured framework for an AI agent to perform quantitative trading and double-entry accounting using the ZVT library. It includes extensive domain-specific constraints, such as 'Semantic Locks' (SL-01 to SL-12) and 'Fatal Constraints' (finance-C-*) in `seed.yaml` and `SKILL.md`, designed to prevent common financial errors like floating-point precision loss and look-ahead bias. While the `install_recipes` in `seed.yaml` contain syntactically incorrect pip commands for GitHub-hosted Go libraries (e.g., pgx, bun), these appear to be unintentional configuration errors rather than malicious code, and no evidence of data exfiltration or harmful prompt injection was found.