money-discover
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework for business opportunity discovery, using research and validation steps to guide the user.
- [DATA_EXFILTRATION]: The skill references reading a project-specific configuration file at
~/.smtm/projects/{slug}/profile.jsonto check the project's current status (e.g., whether it is post-PMF). This file access is restricted to local project metadata and is used for internal state management to ensure the user is directed to the most relevant tool. - [COMMAND_EXECUTION]: The skill utilizes platform-specific commands such as
/money-strategy,/money-save, and/money-restore. These are standard slash commands within the agent's environment used for skill chaining and state persistence, rather than unauthorized shell command execution.
Audit Metadata