money-review-operator

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill contains a 'Standard startup' instruction block directing the agent to perform an initialization sequence (slug resolution, telemetry writing, and category loading) before generating output. These instructions are consistent with the skill's purpose within an integrated toolset.
  • [DATA_EXFILTRATION]: The skill mentions a 'telemetry write' operation as part of its startup routine, which is a standard logging or analytical practice for this author's workflow tools.
  • [COMMAND_EXECUTION]: The instructions reference internal commands like /money-save and /money-strategy to facilitate movement between different analysis phases, which are benign tool-chaining patterns.
  • [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests user-provided business plans; however, it only performs text analysis and lacks dangerous capabilities like arbitrary remote execution or sensitive data access.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 03:34 PM
Security Audit — agent-trust-hub — money-review-operator