money-retro
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool for managing local file state and updating documentation within the project workspace. This usage is aligned with the skill's purpose of automating the tracking of project metrics.
- [SAFE]: The skill processes data from a local JSON file (
.money-state.json) and appends retrospective insights to a markdown file (lessons.md). No sensitive system paths are accessed, and no credentials are hardcoded. - [SAFE]: There are no patterns suggesting prompt injection, data exfiltration, or obfuscation within the skill instructions.
Audit Metadata