skills/kameronkales/planfi-skills/comprehensive-plan/Socket

comprehensive-plan

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's capabilities fit its stated purpose, but it routes sensitive personal financial data and optional API credentials to a third-party remote MCP service outside the local environment. Risk is driven by remote-service trust and credential/data forwarding, not by overt malware behavior.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:51 PM

Package URL

pkg:socket/skills-sh/KameronKales%2Fplanfi-skills%2Fcomprehensive-plan%2F@5ea3d0798f0aa082c1f483f1f916e731d62944280d27b9b7787f63ee6ab21a1e