journal-entries

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts (scripts/post_journals.py, scripts/roll_tb.py) and Node.js commands (npx @cynco/accounting-skills) to process accounting data. These commands are integral to the skill's stated purpose of managing journal entries.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to execute the @cynco/accounting-skills package. This involves downloading the package from the NPM registry if it is not locally available. The package scope aligns with the vendor's namespace ('cynco-labs').
  • [DATA_EXFILTRATION]: No sensitive file access or unauthorized network transmissions were identified. The skill operates on local workpaper files (e.g., transactions.json, journals.json) within the specified client workspace.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 02:12 PM
Security Audit — agent-trust-hub — journal-entries