just-fucking-cancel
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core CSV-audit purpose is legitimate and mostly aligned with the requested data access, but the skill expands into autonomous browser-based cancellation with real-world account impact, and its provenance is muddled across multiple publishers. Data-flow claims are also somewhat inconsistent with external evidence of optional Plaid integration, so the overall footprint is riskier than the local-only description suggests.
Confidence: 84%Severity: 66%
Audit Metadata