money-save
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
mkdir -pto manage session directories andpython3 -cto generate ISO 8601 timestamps. These operations are administrative in nature and strictly limited to the skill's primary function of local state persistence. - [DATA_EXFILTRATION]: Captures business state data and stores it in
~/.smtm/sessions/. This represents standard local state management and does not involve accessing sensitive system credentials or performing network operations. - [PROMPT_INJECTION]: The skill processes conversation history to extract conclusions. Although it creates an ingestion surface for indirect prompt injection, the implementation uses structured YAML and Markdown boundaries which help maintain data integrity for downstream consumption.
Audit Metadata