Security audit

Finance Tracker

Security checks across malware telemetry and agentic risk

Overview

This is a coherent local finance-tracking CLI, but users should understand it stores sensitive finance records locally and may contact exchange-rate services.

Install only if you are comfortable storing expenses, income, goals, assets, and cached exchange rates in ~/.finance-tracker. Be careful before asking an agent to run edit, delete, undo, remove, or recurring process commands, especially in automation. Currency features may contact third-party exchange-rate providers.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (5)

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The skill explicitly encourages running `finance recurring process` daily or from a heartbeat, and states it will auto-log due expenses, but it does not clearly warn that this operation writes new transaction data automatically. In an agent or automation context, that can cause unintended financial records, duplicate entries, or silent state changes without an explicit user confirmation boundary.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The skill advertises live exchange rates and automatic refresh every 6 hours but does not disclose that this feature requires outbound network access or may expose metadata such as usage timing, IP address, or selected currencies to a third-party rate provider. In a local finance tool, missing privacy and network transparency can mislead users operating in restricted or privacy-sensitive environments.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The code creates and persists portfolio and income files under the user's home directory without any explicit notice, consent flow, or control over sensitive-data storage. Because the stored content includes financial assets and income records, this can expose highly sensitive personal information to other local users, backups, malware, or unintended file sharing.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: Asset and income details are serialized directly to JSON on disk, including names, values, descriptions, and timestamps, with no access control, encryption, or warning to the user. In the context of a finance tracker, this is especially sensitive because it reveals net worth, holdings, and income patterns that could materially harm user privacy if exposed.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The process_due method automatically converts due recurring items into persisted financial transactions by calling log_recurring() for each due item, with no confirmation, dry-run mode, or explicit user acknowledgement in this code path. In a finance-tracking context, silent writes can create incorrect ledger entries, duplicate charges after accidental invocation, or unexpected state changes that affect reports and downstream automation.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.