financial-analysis

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is largely coherent with its stated purpose: it aggregates multiple financial data sources via documented APIs, performs local analytics, and outputs ratings and targets. The install and data flow patterns are normal for a data-aggregator/analyst tool. While there are multiple external API calls and local credential references, these are typical for a legitimate financial analysis workflow. The data paths and sources align with the described use cases (portfolio review, daily opportunity scanning, on-demand deep dives). Overall, risk is medium due to external data dependencies and credential handling, but the footprint is proportionate to the stated objective. No clear malicious exfiltration or credential harvesting pattern is evident.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 11:21 AM
Package URL
pkg:socket/skills-sh/geogons%2Fskill-financial-analyst%2Ffinancial-analysis%2F@9e2bec346926361a96f43eb3afbc90cb30043c33
Security Audit — socket — financial-analysis