skills/jsoncodechina/wind-skills/finance-stream-fetch/Socket

finance-stream-fetch

Warn

Audited by Socket on May 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s behavior is coherent with its stated purpose, and its local execution/runtime footprint is modest. The main risk is data-flow trust: it forwards user prompts and optional bearer tokens to an arbitrary, unspecified remote API endpoint, so the remote service cannot be verified as official or proportionate from the skill alone.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

May 13, 2026, 11:47 AM

Package URL

pkg:socket/skills-sh/JsonCodeChina%2Fwind-skills%2Ffinance-stream-fetch%2F@8895728b2701f9c4a2fa9e716ab6a11f4fdb271a