actual-budget
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@actual-app/apipackage from the official NPM registry, which belongs to the well-known Actual Budget organization. - [INDIRECT_PROMPT_INJECTION]: The skill processes financial data, such as transactions and payees, which may contain strings controlled by external parties (e.g., bank descriptions or imported data).
- Ingestion points: Untrusted data enters the context through API functions such as
api.getTransactions,api.importTransactions, andapi.getPayeesdocumented inSKILL.md. - Boundary markers: There are no explicit delimiters or "ignore embedded instructions" warnings shown in the examples for handling external transaction data.
- Capability inventory: Across the documented API, the skill has the capability to perform file system operations (via
ACTUAL_DATA_DIR), network synchronization with a server, and the creation or modification of transactions, accounts, categories, and automated rules. - Sanitization: The provided examples do not demonstrate explicit sanitization or validation of the strings processed from transaction imports.
Audit Metadata