personal-cfo

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill is designed to collect and manage highly sensitive personal financial information, including household income, tax brackets, and cash reserves. This data is stored locally in plain text within the user's ~/Documents and ~/.config directories for archival and reporting purposes, which is consistent with the skill's stated primary function.
  • [COMMAND_EXECUTION]: The skill instructs the agent to perform local file system management, specifically creating directories and moving files during an archive migration process (e.g., migrating data from the skill's reference folder to the local config path).
  • [INDIRECT_PROMPT_INJECTION]: The skill has a significant data ingestion surface via detailed financial questionnaires. This untrusted user data is interpolated into inputs.yaml and report.md files. While no boundary markers or explicit sanitization steps are documented for these local files, the risk is limited to the local environment and the intended modeling workflow.
  • [SAFE]: No remote code execution, obfuscation, or unauthorized network activity was identified. All mathematical formulas used for financial modeling are provided in plain text for transparency and auditing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:18 AM