skills/shellishack/airwallex-xero-reconciliation-skill/airwallex-xero-reconciliation/Gen Agent Trust Hub
airwallex-xero-reconciliation
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional documentation (Markdown) and does not contain any executable code, scripts, or automated triggers.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and API endpoints from well-known and trusted entities including Airwallex, Xero, and the Hong Kong Monetary Authority (HKMA). These references are informative and used for configuration guidance.
- [DATA_EXPOSURE]: The skill explicitly instructs users on secure credential management, recommending the use of local
.envfiles and warning against pasting sensitive information into chat or committing it to repositories. This aligns with security best practices. - [INDIRECT_PROMPT_INJECTION]: While the skill involves procedures for processing external financial data (CSVs and API responses), it provides clear guidelines for validation and reconciliation. As an instructional skill without automated execution logic, the exposure is limited to standard data ingestion risks inherent to the described task.
Audit Metadata