monarch-money
Automates budget management tasks for Monarch Money, enabling users to search transactions, categorize spending, and manage accounts efficiently.
Install this skill
or
90/100
Security score
The monarch-money skill was audited on Feb 9, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 198
Access to hidden dotfiles in home directory
SourceSKILL.md
| 198 | Sessions are cached locally at `~/.mm/session.json`. After initial login, subsequent commands reuse the saved session for faster execution. |
low line 145
Access to .env file
SourceSKILL.md
| 145 | email: process.env.MONARCH_EMAIL, |
low line 146
Access to .env file
SourceSKILL.md
| 146 | password: process.env.MONARCH_PASSWORD, |
low line 147
Access to .env file
SourceSKILL.md
| 147 | mfaSecretKey: process.env.MONARCH_MFA_SECRET |
low line 34
External URL reference
SourceSKILL.md
| 34 | 1. Login to https://app.monarchmoney.com |
low line 141
External URL reference
SourceSKILL.md
| 141 | const client = new MonarchClient({ baseURL: 'https://api.monarch.com' }); |
Scanned on Feb 9, 2026
View Security DashboardInstall this skill with one command
/learn @openclaw/monarch-money