validate-beancount
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
bean-checkandpip install beancountas part of its core functionality for ledger validation. - [EXTERNAL_DOWNLOADS]: The skill uses
pipto install thebeancountpackage from the official Python Package Index (PyPI), which is an established and well-known package registry. - [INDIRECT_PROMPT_INJECTION]: The skill processes external
.beancountfiles, presenting a potential attack surface if the files are attacker-controlled. - Ingestion points: Reads the ledger file path provided to
bean-checkas described inSKILL.md. - Boundary markers: None present; the file content is passed to the validator.
- Capability inventory: The skill executes shell commands and Python subprocess calls.
- Sanitization: None present; the skill relies on the
bean-checkutility to validate the input format.
Audit Metadata