Security audit
Security checks for vulnerabilities and agentic risk
This offline solar calculator has proportionate access, but confirmed calculation and reporting errors mean its financial conclusions need independent checking.
Use this as a rough comparison aid. Independently recalculate the 25-year return, verify current tax-credit eligibility and utility export rates, and read every warning before relying on a FAIR label or signing a contract.
payback() accumulates 30 years of cash flows by default, but its returned cumulative value is displayed and evaluated as the 25-year net. This can overstate the stated 25-year financial outcome and suppress the negative-net warning for proposals that only become profitable in years 26–30, undermining the skill's core verification purpose.
The script treats users as eligible for a 30% ITC unless they explicitly supply --no-itc; it does not verify eligibility or the applicable credit rate. Although the output discloses an assumption, the skill promises eligibility verification, so users may rely on understated costs and overly favorable payback estimates when making a substantial purchase.
When roof age, negative cumulative returns, or an unrealistic quoted payback sets ok to false, the final output can still use price_v, which may remain 'FAIR (market range)'. The loan cash-flow warning also leaves ok unchanged, allowing a FAIR verdict despite that warning; users or downstream agents relying on the headline can consequently miss material financial risks.
