fintechos

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose matches its capabilities, and the CLI comes from an official registry, so this is not clearly malicious. However, all FintechOS access and credential handling are mediated by Membrane rather than direct official FintechOS API flows, creating a third-party trust and data-routing concern; combined with unpinned CLI execution, that makes the skill medium risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Apr 29, 2026, 08:13 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Ffintechos%2F@53fe3a7de9242cb0e09217e3692e4bfd41e84311
Security Audit — socket — fintechos