money-review-operator
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains a 'Standard startup' instruction block directing the agent to perform an initialization sequence (slug resolution, telemetry writing, and category loading) before generating output. These instructions are consistent with the skill's purpose within an integrated toolset.
- [DATA_EXFILTRATION]: The skill mentions a 'telemetry write' operation as part of its startup routine, which is a standard logging or analytical practice for this author's workflow tools.
- [COMMAND_EXECUTION]: The instructions reference internal commands like
/money-saveand/money-strategyto facilitate movement between different analysis phases, which are benign tool-chaining patterns. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests user-provided business plans; however, it only performs text analysis and lacks dangerous capabilities like arbitrary remote execution or sensitive data access.
Audit Metadata