Financial questions become harder when balances and transactions are spread across several accounts. BankBridge guides your assistant through read-only account queries and consistent spending analysis.
Review the Skillstore skill "bankbridge" from https://skillstore.io/skills/bankbridge-money-bankbridge.md and its manifest at https://skillstore.io/api/skills/bankbridge-money-bankbridge/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
All 19 static findings are false positives: Markdown backticks, documented service URLs, and financial query examples do not demonstrate shell execution or system reconnaissance. No evidence found of prompt injection, unauthorized data disclosure, or destructive instructions in the reviewed file. The remote service handles sensitive financial data, but its implementation and read-only enforcement were not available for verification.
bankbridge-money. (2026). bankbridge security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/bankbridge-money-bankbridge/audits/1
BibTeX 引用
@techreport{bankbridge-money-bankbridge-money-bankbridge-2026,
author = {bankbridge-money},
title = {bankbridge security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/bankbridge-money-bankbridge/audits/1},
note = {Author version unspecified}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "bankbridge security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "bankbridge-money"
date-released: "2026-10-27"
url: "https://skillstore.io/skills/bankbridge-money-bankbridge/audits/1"
identifiers:
- type: other
value: "skillstore:bankbridge-money-bankbridge:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據證據置信度: 中
55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Review Household Spending
Compare spending categories across months and avoid counting credit card payments or transfers between your accounts twice.
Investigate Recurring Charges
Review subscriptions and merchant history to identify unfamiliar charges or possible duplicates.
Review Investment Income
Inspect brokerage holdings and investment transactions to summarize dividends and portfolio activity.
試試這些提示
Check Account Balances
Show my connected accounts and current balances. Report any connection warnings.
Compare Spending
Compare my grocery spending for the last two complete months. Exclude credit card payments and transfers between my accounts.
Review Subscriptions
List my recurring charges and investigate possible duplicates using merchant history. Explain uncertain matches without assuming fraud.
Assess Cash Flow
Compare income and spending for the last three complete months. Calculate averages, flag seasonal categories, and report missing accounts or connection warnings.
最佳實務
Refresh the account list at the start of each session and report connection warnings.
Use at least three months for averages and exclude credit card payments and transfers between your accounts from spending.
Keep financial data in the conversation unless the user explicitly requests sharing with another tool or service.
避免
Do not request transfers, bill payments, or trades through this read-only service.
Do not label charges as duplicates before checking merchant history and descriptor variations.
Do not project annual spending from one month or present partial bank coverage as complete.
常見問題
Can BankBridge move money or trade investments?
No. The skill describes read-only access and explicitly excludes transfers, bill payments, and trades.
What must I connect before using it?
Authenticate the BankBridge MCP connection and link your supported US bank, credit card, or brokerage accounts.
Does the service require payment?
The skill lists $5 monthly or $50 annually per connected bank. Confirm current pricing during setup.
How does it avoid counting spending twice?
It excludes credit card payments from checking and transfers between your accounts. Transfers to other people can still count as spending.
What happens when a bank does not respond?
The assistant should show connection warnings and explain that totals include only responding banks.
Does this audit verify the remote service?
No. This review covers the skill instructions, not the remote server implementation or its enforcement of read-only access.