saas-metrics
Warn
Audited by Socket on Jul 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated finance/analytics purpose is plausible, but the MCP server provenance and scope are underspecified and do not cleanly align with the declared Stripe/Chargebee/Mixpanel tooling. There is no direct malware signal, installer abuse, or obvious credential theft in the skill text, but the unresolved dependency and data-flow ambiguity make the trust model incomplete.
Confidence: 82%Severity: 58%
Audit Metadata