financial-api-integrator
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill is purpose-aligned for finance, but its footprint is inherently high risk because it enables autonomous real-world money movement, including FX/crypto actions, using sensitive payment credentials. No malicious exfiltration or supply-chain behavior is shown, but the lack of explicit per-action approval and unspecified crypto/provider details make it unsafe for agent autonomy.
Confidence: 87%Severity: 86%
Audit Metadata