skills/digital-stoic-org/agent-skills/toshl/Socket

toshl

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the functional scope is coherent for finance sync/reporting, but the trust and data-flow story is not. The main risk is reliance on an unverifiable third-party MCP intermediary instead of clearly documented direct Toshl API access; this creates medium risk of sensitive financial data and tokens flowing through an unnecessary external service.

Confidence: 85%Severity: 63%

Audit Metadata

Analyzed At

Apr 2, 2026, 06:18 AM

Package URL

pkg:socket/skills-sh/digital-stoic-org%2Fagent-skills%2Ftoshl%2F@c876f32aae27ac2d764edde2e053f069e2345022