zenith-finance-maintenance
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Python scripts and shell commands (
chmod +x,python3,cp,mkdir) to be executed by the user or agent. These operations are restricted to the local filesystem (specifically~/Documents/Obsidian/Notes/Finance/) and are consistent with the skill's stated goal of maintaining local ledger files. - [DATA_EXFILTRATION]: While the skill mentions a separate tool
zenith-finance-syncfor Google Sheets synchronization, the code within this specific skill does not perform any network operations or external data transmissions. It focuses entirely on local file maintenance. - [DYNAMIC_EXECUTION]: The skill includes Python code snippets (
update_ledger.pyand a transaction fixer) that use regex (re.sub) and file I/O. While these are executed locally, there is a lack of strict input validation on the numerical values passed as arguments, which could lead to file corruption if non-numeric data is injected, though this does not pose a direct security threat to the host system.
Audit Metadata