actual-budget

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the '@actual-app/api' package from npm, which is the official library for the Actual Budget project.
  • [COMMAND_EXECUTION]: Provides standard shell commands for installation and JavaScript examples for interacting with the finance API.
  • [SAFE]: While the documentation mentions the option to disable TLS validation for self-hosted instances with self-signed certificates, this is documented as an optional environment variable and is a known configuration pattern for local development.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:17 PM
Security Audit — agent-trust-hub — actual-budget