integrated-finance

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities are mostly aligned, and the CLI comes from a plausible official source, but the core data flow is mediated through Membrane rather than directly to Integrated Finance. That third-party credential and request proxying is proportionate to the product’s stated design yet still raises medium risk, especially with an unpinned global CLI install and broad proxy capability.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Apr 29, 2026, 06:39 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fintegrated-finance%2F@0bb2ebe65168ea521ca9deb4c97811c64dad44ad
Security Audit — socket — integrated-finance