finance-substrate

SUSPICIOUS: The finance/tax capabilities are mostly aligned with the stated purpose, and the official data endpoints are coherent. The main risks come from transitive skill installation and credential/data forwarding to third-party tools (`gws`, `agent-browser`) for Gmail and DIAN access, plus semi-automated real-world filing assistance. This looks more like a high-sensitivity, over-trusting workflow than confirmed malicious behavior.