Security audit
Security checks for vulnerabilities and agentic risk
This skill transparently reads local phone notification files to summarize personal spending, with no evidence of exfiltration, mutation, hidden code, or persistence.
Install only if you are comfortable letting the agent read local phone notification files for the requested dates, including payment, bank, shopping, and transfer notifications. Use explicit prompts such as a specific date range or category to limit what is processed.
The trigger list includes very broad everyday spending-related phrases, which increases the likelihood of accidental activation during unrelated conversations. Because this skill reads and analyzes phone notification data, misfires can expose or process sensitive financial information without the user clearly intending to invoke the skill.
The skill is designed to ingest and summarize highly sensitive personal financial data from mobile notifications, including bank, payment, shopping, and transfer records, but it does not present a clear privacy notice, consent boundary, or data-handling limitation. In this context, missing transparency and access warnings materially increase the risk of unauthorized or unexpected exposure of private spending patterns and account activity.
No suspicious patterns detected.
