Skills
Navigate
skills/adityahimaone/hermes-agent-rtk-caveman/zenith-finance-sync/Gen Agent Trust Hub

zenith-finance-sync

Pass

Audited by Gen Agent Trust Hub on Apr 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/sync_wrapper.py executes an internal helper utility (google_api.py) using the subprocess.run function. The implementation avoids shell invocation by passing arguments as a list, which mitigates the risk of command injection.
  • [DATA_EXFILTRATION]: In scripts/sync_wrapper.py and scripts/sync.py.bak, the skill reads transaction data from Transactions.md and authentication credentials from google_token.json. It subsequently transmits this information to Google Sheets API endpoints. This data flow is functional, necessary for the skill's operation, and targets a well-known, trusted service provider.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 25, 2026, 12:08 PM
Security Audit — agent-trust-hub — zenith-finance-sync