budget
Warn
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions mandate the use of
duckdb -cfor all calculations. This involves executing shell commands with SQL queries to process local file data.\n- [DATA_EXFILTRATION]: The skill accesses highly sensitive personal financial documents, including bank statements (Monzo Personal Account Transactions*.csv,Monzo Joint Account Transactions*.csv) and financial workbooks (Budget*.xlsm) located in the~/Downloadsdirectory. This constitutes significant data exposure of private records.\n- [DYNAMIC_EXECUTION]: The skill requires the agent to runINSTALL spatial; LOAD spatial;within DuckDB. This involves the dynamic installation and loading of binary extensions at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from financial files, which could serve as a vector for malicious instructions embedded in transaction descriptions or spreadsheet cells.\n - Ingestion points: CSV and XLSM files located in
~/Downloads.\n - Boundary markers: None identified. There are no instructions to the agent to treat the content of the CSV or Excel files as purely data or to ignore potential instructions within them.\n
- Capability inventory: Shell-based execution via
duckdb -cand read access to the local file system.\n - Sanitization: None identified. The skill directly processes and reports data retrieved from external files without defined sanitization or validation logic.
Audit Metadata