Financial Ratio Analysis

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:24 PM UTC
• Version:
  1.0.2

Overview

This skill is a coherent financial reporting helper, but users should treat its generated spreadsheets and cache files as sensitive business data.

Install only in an environment approved for client accounting data. Confirm the QBO client slug/account before running, verify the referenced local Python script is trusted, and store or delete the generated workbook and .cache/financial-ratios/{slug}.json according to your organization’s data-handling rules.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill clearly describes pulling financial data from QBO and writing outputs to local files and caches, but it does not warn users that sensitive accounting information and derived client metrics will be stored on disk. This creates a real security and privacy risk because operators may run the skill on shared machines or unmanaged endpoints without understanding the exposure of local Excel exports and cache artifacts.

VirusTotal

57/57 vendors flagged this skill as clean.