fintech-launch

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated fintech audit purpose is plausible, but the skill is overly autonomous and relies on multiple unverified sub-skills, creating a significant transitive-trust and execution-scope risk. No confirmed malware or external exfiltration is present in this fragment, but the unknown downstream skill behavior and silent local telemetry logging make it unsafe to treat as benign.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Mar 23, 2026, 11:03 AM
Package URL
pkg:socket/skills-sh/tinh2%2Fskills-hub-registry%2Ffintech-launch%2F@4f497a0ff62b6c05d3c60effcf8fd4415f616d24
Security Audit — socket — fintech-launch