skills/wind-information-co-ltd/wind-skills/wind-find-finance-skill/Socket

wind-find-finance-skill

Warn

Audited by Socket on May 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches the behavior, but the skill’s main function is transitive skill installation through a third-party CLI and remote git repos. There is no direct credential theft or exfiltration, yet the trust chain and global-install guidance make it medium risk.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

May 8, 2026, 06:52 AM

Package URL

pkg:socket/skills-sh/Wind-Information-Co-Ltd%2Fwind-skills%2Fwind-find-finance-skill%2F@2e37d7c905f2e2bcc518da4965888584cf93e34c