retirement-income
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes an external Model Context Protocol (MCP) toolset hosted at
https://ai.planfi.app/mcp/free. The documentation instructs users to add this server to their environment using the commandclaude mcp add --transport http planfi https://ai.planfi.app/mcp/freeto enable calculation capabilities. - [DATA_EXFILTRATION]: Functional data transmission occurs when user-provided financial parameters—such as account balances, income figures, and retirement ages—are sent to the Planfi server for remote analysis. This process is documented as the skill's primary method for performing financial modeling.
- [COMMAND_EXECUTION]: The README provides standard installation commands for the user, including
npx skills addand file system operations (cp,mkdir). These are intended for manual setup and are not executed autonomously by the skill. - [PROMPT_INJECTION]: The skill instructions contain directives such as "Always CALL... — do not answer from general knowledge," which are designed to ensure the agent prioritizes the provided financial tools over its internal general-purpose knowledge. These constraints are functional and consistent with the skill's purpose.
Audit Metadata