Expense Tracker

Warn

Audited by Socket on Jun 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated finance purpose matches the described capabilities, but the core execution surface is an opaque `accounting-mcp` server with unverified provenance and undisclosed data routing. This is not confirmed malware, yet it poses medium security risk because sensitive financial data may transit an intermediary whose ownership, install source, and API endpoints are not provided.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Jun 3, 2026, 02:52 PM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills-hub%2Fexpense-tracker%2F@c9e0e7b1c29a3e7d00fbd88ea53da50152cce0a5
Security Audit — socket — Expense Tracker