data-science

Warn

Audited by Socket on Jun 23, 2026

2 alerts found:

AnomalySecurity
AnomalyLOW
SKILL.md

SUSPICIOUS: the core finance-analysis purpose largely matches the Python/API capabilities, and official services like Polygon, Finnhub, FRED, Tushare, and Notion are proportionate. The main concerns are broad secret-file lookup, undocumented bundled zip provenance, and forwarding MX_APIKEY to unverified $mx-* executables, which weakens trust and makes the skill riskier than a normal documentation-only finance workflow.

Confidence: 82%Severity: 57%
SecurityMEDIUM
references/original-skills/jupyter-live-kernel.md
Audit Metadata
Analyzed At
Jun 23, 2026, 05:50 PM
Package URL
pkg:socket/skills-sh/redyuan43%2Fmy-skills-repo%2Fdata-science%2F@129aef5f71b59e4484eb22d6fc16a3b219a096c3897156340950a432f0b85b4a