skills/jwangkun/claude-for-financial-services-cn/china-kyc-doc-parse/Socket

china-kyc-doc-parse

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated purpose is KYC document parsing, but it expands into external financial-data/MCP integrations that are not clearly necessary for that task. Official vendor domains reduce concern somewhat, but third-party MCP ambiguity and sensitive KYC data flow make the scope and trust model only partially coherent.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 01:07 PM

Package URL

pkg:socket/skills-sh/jwangkun%2Fclaude-for-financial-services-cn%2Fchina-kyc-doc-parse%2F@0cbefd9046621d84f7ab46fe935129545ed093bd2d0ff93f640888fa5166f42c