Security audit
Settlement Reconciliation Guard
Security checks across malware telemetry and agentic risk
Overview
The skill's code, instructions, and requirements are consistent with its stated purpose: it heuristically builds reconciliation briefs locally and does not request secrets, install anything, or call external services.
This skill appears coherent and low-risk: it runs locally to generate reconciliation briefs from user prompts and includes unit tests. Before installing, confirm you trust the skill source (it has no homepage and an unknown source). If you plan to use it in production or grant it autonomous invocation, review the full handler.py (present in the package) to ensure it won't be modified later to add network calls or secret access, and avoid sending sensitive or private credentials in prompts (the skill processes prompt text). Running the included tests in a sandboxed environment is a good quick sanity check.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.