The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The installation process requires cloning an unverified third-party repository (github.com/robcerda/monarch-mcp-server) and installing dependencies like the MonarchMoneyCommunity library. These sources are not from verified or trusted organizations.\n- [DATA_EXFILTRATION]: The skill accesses and stores sensitive session data in ~/.monarch/session.pickle. While this is part of the intended functionality for persistent authentication, it represents access to highly sensitive financial credentials.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves transaction descriptions and notes from the Monarch Money API, which are untrusted inputs that could contain malicious instructions designed to influence the agent's behavior.\n
Ingestion points: Untrusted data is ingested via tools such as get_transactions and search_transactions as described in SKILL.md.\n
Boundary markers: No delimiters or safety instructions are provided to the agent to prevent it from following commands embedded in the financial data.\n
Capability inventory: The skill possesses powerful capabilities to modify financial data, including create_transaction, update_transaction, and set_budget_amount.\n
Sanitization: There is no evidence of sanitization or filtering of the financial data before it is processed by the agent.

monarch-money-mcp-server