data-science
Warn
Audited by Socket on Jun 23, 2026
2 alerts found:
AnomalySecurityAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core finance-analysis purpose largely matches the Python/API capabilities, and official services like Polygon, Finnhub, FRED, Tushare, and Notion are proportionate. The main concerns are broad secret-file lookup, undocumented bundled zip provenance, and forwarding MX_APIKEY to unverified $mx-* executables, which weakens trust and makes the skill riskier than a normal documentation-only finance workflow.
Confidence: 82%Severity: 57%
Securityreferences/original-skills/jupyter-live-kernel.md
MEDIUMSecurityMEDIUM
references/original-skills/jupyter-live-kernel.md
Audit Metadata