fintechos
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated purpose matches its capabilities, and the CLI comes from an official registry, so this is not clearly malicious. However, all FintechOS access and credential handling are mediated by Membrane rather than direct official FintechOS API flows, creating a third-party trust and data-routing concern; combined with unpinned CLI execution, that makes the skill medium risk.
Confidence: 88%Severity: 58%
Audit Metadata