Treeline Money

• Analyzed: May 12, 2026, 3:10 AM
• Findings: 1
• Version: 26.4.2101
• Hash: 11c4ddb400b9a32eda61e473b9ef39d42fa1004123dbbf5c40b858fa2d313297
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Treeline Money skill bundle provides a legitimate interface for a local-first personal finance tool. It includes clear instructions for the AI agent, explicitly forbidding the handling of encryption keys and requiring user confirmation for data-modifying commands. The installation process fetches the 'tl' CLI from a public GitHub repository (treeline-money/treeline), and the tool operates on a local DuckDB database (~/.treeline/treeline.duckdb) without evidence of unauthorized data exfiltration or malicious intent.