Expense Tracker
Warn
Audited by Socket on Jun 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated finance purpose matches the described capabilities, but the core execution surface is an opaque `accounting-mcp` server with unverified provenance and undisclosed data routing. This is not confirmed malware, yet it poses medium security risk because sensitive financial data may transit an intermediary whose ownership, install source, and API endpoints are not provided.
Confidence: 84%Severity: 61%
Audit Metadata