tres-import-contacts
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Python Environment and Library Usage: The skill instructions involve checking for and recommending the installation of the
openpyxllibrary (version 3.1.5) for processing Excel files. This is a standard procedure for tools requiring specific file parsing capabilities. The skill provides clear instructions for the user to perform this in a virtual environment, which is a recommended practice. - File Parsing and Data Handling: The skill reads user-provided files (CSV and XLSX) to extract addresses, labels, and tags. It includes logic to handle common formatting issues like BOM prefixes in Excel-saved CSVs and semicolon delimiters used in different locales. This parsing logic is consistent with the skill's stated purpose of bulk data import.
- Interaction with TRES Finance API: The skill uses the
user-tres-financeMCP server to performget_viewer,customAccountNameLabel(query),setCustomAccountName(mutation), andsetCustomAccountNameLabelTags(mutation). These operations are used to authenticate, check for existing entries, and update the TRES address book. The process includes user confirmation steps, especially for larger imports, which is a good practice for ensuring data integrity. - Indirect Data Processing: The skill processes external data (the contents of the uploaded files). It incorporates basic validation steps, such as skipping rows with missing required fields and deduplicating entries by address. While any ingestion of external data presents a potential surface for indirect instruction, the skill's narrow focus on address book fields (Name, Address, Tag) and the requirement for user confirmation before execution mitigate typical risks associated with this category.
Audit Metadata