money-review-operator

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill reads from ~/.smtm/sessions/{slug}/ and requests user financial information including cash runway and burn rates. These operations are restricted to project context gathering within the skill's defined scope and are not associated with any network tools or exfiltration patterns.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from business plans and session snapshots. However, the risk is mitigated as the skill's capabilities are limited to producing text-based analytical output, with no access to dangerous tools such as shell execution, file modification, or external network requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 10:06 AM