open-fava
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'fava' and 'beancount' Python packages. These are well-known and standard tools in the plain-text accounting ecosystem.
- [COMMAND_EXECUTION]: The skill executes shell commands to start the Fava process via the 'fava' CLI or a provided 'run_fava.sh' script. It correctly defaults to binding to 127.0.0.1 to ensure the UI is not exposed to the network.
- [DATA_EXFILTRATION]: The skill accesses financial data files (.beancount), which is its primary purpose. The instructions specify localhost binding to prevent unauthorized remote access to this sensitive data.
- [PROMPT_INJECTION]: The skill processes ledger files which could serve as a vector for indirect prompt injection. * Ingestion points: beancount ledger files (SKILL.md) * Boundary markers: No explicit delimiters or boundary markers for the file content are mentioned. * Capability inventory: Shell script execution and local web server hosting. * Sanitization: The skill relies on the third-party Fava tool to process and sanitize the ledger data.
Audit Metadata