finnhub
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is mostly coherent and uses an official-looking same-vendor CLI, but it is not a direct Finnhub integration. It routes authentication and API activity through Membrane as an intermediary, which creates a meaningful third-party data-flow and trust risk even though the requested permissions are otherwise proportionate.
Confidence: 85%Severity: 53%
Audit Metadata