kelly-family-fund
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill manages sensitive household financial records and access tokens. It follows security best practices by utilizing environment variables for API keys and storing local OAuth credentials in a dedicated hidden directory (
~/.busabase/airapps) with secure file permissions (0700 for directories, 0600 for files) to prevent unauthorized access. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied ledger data via CSV files through the
scripts/import_csv.mjsscript. While this represents a data ingestion surface, the risk of indirect prompt injection is mitigated by the script's strict type conversion and the frontend application's consistent use of HTML escaping before rendering any stored content. - [COMMAND_EXECUTION]: The skill provides a local Hono-based web server and a CLI utility for data synchronization. These components are scoped to the intended functionality of the skill and utilize standard Node.js APIs for network and file operations without exposing arbitrary command execution paths.
- [REMOTE_CODE_EXECUTION]: The project uses pinned versions of verified dependencies like
busabase-sdkandhono. There are no instances of dynamic code execution (eval/exec) or downloading and executing scripts from untrusted remote servers.
Audit Metadata