finicity
Warn
Audited by Socket on Aug 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated banking-read purpose is plausible, but the actual trust boundary is an unverified `okou` CLI/gateway that receives a banking-capable token and returns highly sensitive financial data. Because the core executable and endpoint ownership could not be verified, this skill carries high supply-chain and credential-forwarding risk despite read-only scope.
Confidence: 88%Severity: 86%
Audit Metadata