Security audit

financial-categorizer

Security checks across malware telemetry and agentic risk

Overview

This is a local finance database tool with disclosed database-changing commands; use the recurring-payment automation carefully, but I found no hidden or exfiltrating behavior.

Before installing, understand that this tool directly changes your local finance SQLite database. Keep backups, run dry-run modes first for recurring discovery and linking, and be especially careful with remove-recurring --hard because it deletes recurring-payment configuration state.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Medium

Confidence: 86% confidence
Finding: `cmd_remove_recurring` performs cancellation or hard deletion of recurring-payment records without any confirmation prompt or preview, unlike other destructive commands in this CLI. In a finance-management context, this can silently alter historical tracking behavior or remove configuration state through a single mistaken invocation, increasing integrity risk for user data.

Autonomous Decision Making

Medium

Category: Excessive Agency
Content: cand["id"] = new_id saved_configs.append(cand) # Automatically run matching and auto-closing of dead existing active configurations self.link_transactions(dry_run=False, auto_close=True) else: saved_configs = discovered
Confidence: 90% confidence
Finding: Automatically run

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.