Security audit
group-expense-settler
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local, offline expense-splitting helper with behavior that matches its stated purpose.
Review the ledger before sharing output because it may reveal personal spending details. The tool runs offline and appears safe for local use, but its settlement numbers are only as accurate as the input ledger and chosen weights.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.