saas-metrics

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated finance/analytics purpose is plausible, but the MCP server provenance and scope are underspecified and do not cleanly align with the declared Stripe/Chargebee/Mixpanel tooling. There is no direct malware signal, installer abuse, or obvious credential theft in the skill text, but the unresolved dependency and data-flow ambiguity make the trust model incomplete.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 8, 2026, 07:48 PM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills-hub%2Fsaas-metrics%2F@31d090e5ac32b10015af9bfba5886872a941230c507875213239aaa12fd4c018
Security Audit — socket — saas-metrics