hunt-fintech-graphql

Warn

Audited by Socket on Nov 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent as a fintech-GraphQL security-hunting guide and does not install software, request credentials, or route data to third-party endpoints. However, it explicitly equips an AI agent to perform offensive security testing against financial systems, including money-movement and double-spend scenarios with real-world impact, which makes the overall security risk high even without clear malware or exfiltration behavior.

Confidence: 94%Severity: 82%
Audit Metadata
Analyzed At
Nov 12, 2026, 05:47 PM
Package URL
pkg:socket/skills-sh/gsfsss%2Fclaude-bughunter%2Fhunt-fintech-graphql%2F@939cfae8c565be79ac9b75f40a7d8cb9f858d8ef4377a342e8ae9047fbe0b9a7