扫描报告
0 /100
treeline
Chat with your finances from Treeline Money. Query balances, spending, budgets, and transactions.
Legitimate personal finance CLI skill with all capabilities properly declared. All operations access the local ~/.treeline/ database containing user financial data, which is the intended purpose.
可以安装
This skill is safe to use. All capabilities are documented and justified for the stated purpose of querying local financial data.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md: Runs 'tl' CLI commands for database operations |
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md: Accesses ~/.treeline/treeline.duckdb for financial data |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md: Declares 'tl sync' for bank integration downloads |
4 项发现
中危 外部 URL 外部 URL
https://treeline.money SKILL.md:5 中危 外部 URL 外部 URL
https://treeline.money/download SKILL.md:35 中危 外部 URL 外部 URL
https://treeline.money/docs/integrations/bank-sync/ SKILL.md:68 中危 外部 URL 外部 URL
https://treeline.money/docs/integrations/csv-import/ SKILL.md:68 目录结构
1 文件 · 15.0 KB · 488 行 Markdown 1f · 488L
└─
SKILL.md
Markdown
安全亮点
✓ All shell commands are documented with clear read/write distinction
✓ Write operations require user confirmation before execution
✓ Data stays local - no exfiltration to external servers
✓ CLI downloaded from official GitHub releases (treeline-money)
✓ Properly warns against attempting database unlock (user must do this directly)
✓ Uses --dry-run flags to preview operations safely
✓ Demo mode available for trying without real financial data
✓ Encryption keys stored in OS keychain (standard security practice)