finicity

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated banking-read purpose is plausible, but the actual trust boundary is an unverified `okou` CLI/gateway that receives a banking-capable token and returns highly sensitive financial data. Because the core executable and endpoint ownership could not be verified, this skill carries high supply-chain and credential-forwarding risk despite read-only scope.

Confidence: 88%Severity: 86%
Audit Metadata
Analyzed At
Aug 25, 2026, 02:56 PM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Ffinicity%2F@06c1a8aaaad0b9fb7c2a03460978632611e70fcd1893542bc292ea272a663194
Security Audit — socket — finicity