monarch-money

{
  "meta": {
    "document_id": "ssds:auto:monarch-money:1.0.0",
    "ssds_version": "0.2.0",
    "scanner_version": "0.4.0+fe6fd9123d50",
    "created_at": "2026-03-05T02:18:33.815Z",
    "created_by": {
      "agent": "safeagentskills-cli/generate-ssds"
    },
    "language": "en",
    "notes": "Auto-generated SSDS. Manual review recommended."
  },
  "skill": {
    "name": "monarch-money",
    "version": "1.0.1",
    "format": "agent_skill",
    "description": "TypeScript library and CLI for Monarch Money budget management. Search transactions by date/merchant/amount, update categories, list accounts and budgets, manage authentication. Use when user asks about Monarch Money transactions, wants to categorize spending, needs to find specific transactions, or wants to automate budget tasks.",
    "publisher": "ClawHub",
    "source": {
      "channel": "local"
    },
    "artifact": {
      "sha256": "20220c5310e94a757f4cfd182426121b7285eff031adc978f1873a76b9991b68",
      "hash_method": "files_sorted"
    }
  },
  "capabilities": {
    "execution": {
      "can_exec_shell": true,
      "can_exec_code": false,
      "privilege_level": "user",
      "can_install_deps": true,
      "can_persist": false
    },
    "filesystem": {
      "reads_workspace": true,
      "reads_user_home": true,
      "reads_system": false,
      "writes_workspace": true,
      "writes_user_home": true,
      "writes_system": false,
      "can_delete": true
    },
    "network": {
      "egress": "any",
      "ingress": false
    },
    "credentials": {
      "reads_env_vars": true,
      "reads_credential_files": true,
      "reads_browser_data": true,
      "reads_keychain": false
    },
    "services": [],
    "actions": {
      "can_send_messages": false,
      "can_post_public": false,
      "can_purchase": false,
      "can_transfer_money": false,
      "can_deploy": false,
      "can_delete_external": false
    },
    "prompt_injection_surfaces": [
      "web",
      "documents"
    ],
    "content_types": [
      "general"
    ]
  },
  "hazards": {
    "hdac": {
      "H": 4,
      "D": 4,
      "A": 1,
      "C": 1
    },
    "flags": [
      "EXEC",
      "FS_READ_WORKSPACE",
      "FS_READ_USER",
      "FS_WRITE_WORKSPACE",
      "FS_WRITE_USER",
      "FS_DELETE",
      "NET_EGRESS_ANY",
      "CREDS_ENV",
      "CREDS_FILES",
      "CREDS_BROWSER",
      "PI_WEB",
      "PI_DOCUMENTS"
    ],
    "custom_flags": [
      {
        "code": "PROMPT_INJECTION",
        "name": "Prompt Injection Risk",
        "description": "Contains prompt injection patterns in: lib/api/budgets/BudgetsAPI.ts"
      },
      {
        "code": "FILE_DELETE",
        "name": "File Deletion",
        "description": "Can delete files in: lib/client/auth/SessionStorage.ts, package.json"
      },
      {
        "code": "TOOL_ABUSE",
        "name": "Unauthorized Tool Use",
        "description": "MCP_SYS_FILE_DESTRUCTION: File destruction or wiping commands"
      },
      {
        "code": "SOCIAL_ENGINEERING",
        "name": "Social Engineering Risk",
        "description": "SOCIAL_ENG_VAGUE_DESCRIPTION: Skill description is too vague or missing"
      },
      {
        "code": "COMMAND_INJECTION",
        "name": "Command Injection Risk",
        "description": "MCP_SQL_BLIND: Blind SQL injection, system table access, or stored procedure abuse"
      }
    ],
    "confidence": {
      "level": "medium",
      "basis": [
        "static_analysis"
      ],
      "notes": "Detected 5 security patterns (3 vendored rule hits). Review recommended."
    },
    "rationale": {
      "H": "H4: Critical: Privilege escalation or malware detected",
      "D": "D4: Critical: Credential theft or data exfiltration",
      "A": "A1: Local side effects only",
      "C": "C1: General content"
    }
  },
  "containment": {
    "level": "maximum",
    "required": [
      {
        "control": "SANDBOX_CONTAINER",
        "reason": "Code execution capability"
      }
    ],
    "recommended": [
      {
        "control": "LOG_ACTIONS",
        "reason": "Audit trail for all actions"
      }
    ],
    "uncontained_risk": "Risk level depends on manual review of actual capabilities."
  },
  "risks": {
    "risks": [
      {
        "risk": "Prompt injection patterns detected in: lib/api/budgets/BudgetsAPI.ts",
        "severity": "high",
        "mitigation": "Review SKILL.md for hidden instructions. Do not use with untrusted input."
      },
      {
        "risk": "Unauthorized tool use: MCP_SYS_FILE_DESTRUCTION",
        "severity": "critical",
        "mitigation": "Remove destructive file operations."
      },
      {
        "risk": "Command injection risk: MCP_SQL_BLIND",
        "severity": "high",
        "mitigation": "Remove SQL exploitation patterns."
      },
      {
        "risk": "Social engineering indicators: SOCIAL_ENG_VAGUE_DESCRIPTION",
        "severity": "low",
        "mitigation": "Provide clear, detailed description of skill functionality"
      }
    ],
    "limitations": [
      "Static analysis only - runtime behavior not verified"
    ]
  },
  "incident_response": {
    "kill_switch": [
      "Stop the agent process"
    ],
    "containment": [
      "Review logs for unexpected actions"
    ],
    "recovery": [
      "Depends on skill capabilities"
    ]
  },
  "evidence": [
    {
      "evidence_id": "EV:file-1",
      "type": "file_excerpt",
      "title": "cli/client.ts",
      "file_path": "cli/client.ts"
    },
    {
      "evidence_id": "EV:file-2",
      "type": "file_excerpt",
      "title": "cli/commands/accounts.ts",
      "file_path": "cli/commands/accounts.ts"
    },
    {
      "evidence_id": "EV:file-3",
      "type": "file_excerpt",
      "title": "cli/commands/auth.ts",
      "file_path": "cli/commands/auth.ts"
    },
    {
      "evidence_id": "EV:file-4",
      "type": "file_excerpt",
      "title": "cli/commands/categories.ts",
      "file_path": "cli/commands/categories.ts"
    },
    {
      "evidence_id": "EV:file-5",
      "type": "file_excerpt",
      "title": "cli/commands/doctor.ts",
      "file_path": "cli/commands/doctor.ts"
    },
    {
      "evidence_id": "EV:file-6",
      "type": "file_excerpt",
      "title": "cli/commands/receipts.ts",
      "file_path": "cli/commands/receipts.ts"
    },
    {
      "evidence_id": "EV:file-7",
      "type": "file_excerpt",
      "title": "cli/commands/test.ts",
      "file_path": "cli/commands/test.ts"
    },
    {
      "evidence_id": "EV:file-8",
      "type": "file_excerpt",
      "title": "cli/commands/transactions.ts",
      "file_path": "cli/commands/transactions.ts"
    },
    {
      "evidence_id": "EV:file-9",
      "type": "file_excerpt",
      "title": "cli/index.ts",
      "file_path": "cli/index.ts"
    },
    {
      "evidence_id": "EV:file-10",
      "type": "file_excerpt",
      "title": "cli/utils/output.ts",
      "file_path": "cli/utils/output.ts"
    },
    {
      "evidence_id": "EV:cisco-1",
      "type": "file_excerpt",
      "title": "MCP_SQL_BLIND [HIGH] lib/utils/index.ts:8: export function sleep(ms: number): Promise<void> {",
      "file_path": "lib/utils/index.ts"
    },
    {
      "evidence_id": "EV:cisco-2",
      "type": "file_excerpt",
      "title": "MCP_SYS_FILE_DESTRUCTION [CRITICAL] package.json:23: \"clean\": \"rm -rf dist\",",
      "file_path": "package.json"
    },
    {
      "evidence_id": "EV:cisco-3",
      "type": "file_excerpt",
      "title": "SOCIAL_ENG_VAGUE_DESCRIPTION [LOW] SKILL.md:1: ---",
      "file_path": "SKILL.md"
    }
  ]
}