retirement-income

Pass

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes an external Model Context Protocol (MCP) toolset hosted at https://ai.planfi.app/mcp/free. The documentation instructs users to add this server to their environment using the command claude mcp add --transport http planfi https://ai.planfi.app/mcp/free to enable calculation capabilities.
  • [DATA_EXFILTRATION]: Functional data transmission occurs when user-provided financial parameters—such as account balances, income figures, and retirement ages—are sent to the Planfi server for remote analysis. This process is documented as the skill's primary method for performing financial modeling.
  • [COMMAND_EXECUTION]: The README provides standard installation commands for the user, including npx skills add and file system operations (cp, mkdir). These are intended for manual setup and are not executed autonomously by the skill.
  • [PROMPT_INJECTION]: The skill instructions contain directives such as "Always CALL... — do not answer from general knowledge," which are designed to ensure the agent prioritizes the provided financial tools over its internal general-purpose knowledge. These constraints are functional and consistent with the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 5, 2026, 04:50 PM
Security Audit — agent-trust-hub — retirement-income