accounting
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves expense data from Google Sheets using WebFetch CSV export URLs. This is a standard integration with a well-known service necessary for the skill's accounting functionality.
- [COMMAND_EXECUTION]: The Bash 'mv' command is used to rename receipt files after processing. This file system operation is restricted to a designated local working directory and requires explicit user confirmation for each file.
- [DATA_EXFILTRATION]: The skill accesses files within a local user path (
/Users/bruno/Documents/...). The skill instructions properly address potential data exposure by directing all sensitive year-specific data and spreadsheet links to the local working folder, which is not part of the version-controlled skill directory. - [PROMPT_INJECTION]: The skill processes untrusted external data from receipt images and PDFs. The risk of indirect prompt injection is mitigated by the skill's design, which focuses on specific field extraction (Vendor, Cost, Date) and mandates a human review step where the user must confirm all proposed data before it is added to the records.
Audit Metadata