Copilot Money Mac

• Analyzed: May 12, 2026, 4:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: 66e278710e0ef71b56fae93acba25fa0c252e63b9ba2d110736c706d631795f8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to query sensitive local financial data from the Copilot Money Mac app using `sqlite3` and `strings`/`grep` on local files. While its stated purpose is benign and it explicitly claims no data exfiltration, the `SKILL.md` provides instructions for the agent to execute arbitrary SQL queries via `sqlite3 ... "YOUR_QUERY"`. This presents a significant prompt-injection vulnerability, as a malicious user prompt could lead the agent to execute unintended SQL commands, potentially accessing or manipulating data beyond the skill's intended scope. The ability to run arbitrary shell commands for file access (`strings`, `grep`) also contributes to the 'suspicious' classification due to the broad permissions granted to the agent, even if currently scoped to local files.