integrated-finance
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s purpose and capabilities are mostly aligned, and the CLI comes from a plausible official source, but the core data flow is mediated through Membrane rather than directly to Integrated Finance. That third-party credential and request proxying is proportionate to the product’s stated design yet still raises medium risk, especially with an unpinned global CLI install and broad proxy capability.
Confidence: 86%Severity: 56%
Audit Metadata