Actual Budget

• Analyzed: May 12, 2026, 3:08 AM
• Findings: 1
• Version: 1.0.4
• Hash: fb23f82378967dc753cc597f6bc67e35dbc57515609471c2297a6d9ad079504c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a legitimate interface for the Actual Budget Node.js API, following security best practices such as environment variable usage for credentials and explicit instructions to redact sensitive financial data. It correctly points to the official `@actual-app/api` package and includes safeguards against common risks like TLS disabling or remote script execution in SKILL.md.