china-competitive-analysis

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill’s purpose and scope are mostly coherent for China-focused competitive analysis, but it references a non-official `wind-mcp` component that may receive a sensitive Wind API key. That mismatch makes the skill moderately risky and better classified as suspicious rather than benign, though there is no evidence of direct malware, hidden execution, or overt data exfiltration in the skill itself.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 01:07 PM
Package URL
pkg:socket/skills-sh/jwangkun%2Fclaude-for-financial-services-cn%2Fchina-competitive-analysis%2F@9a74f0d2d357ce8a365330859c7db49d1887bd45000866df9fa248e48b979f06
Security Audit — socket — china-competitive-analysis