skills/alirezarezvani/claude-skills/finance-skills/Socket

finance-skills

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The finance purpose and local stdlib-only scripts are coherent and there is no evidence of credential access, exfiltration, or malicious data routing. Risk comes mainly from the recommended npx-based third-party installer and transitive skill installation path, which are broader than necessary for a simple finance skill.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Apr 1, 2026, 03:07 PM

Package URL

pkg:socket/skills-sh/alirezarezvani%2Fclaude-skills%2Ffinance-skills%2F@67f2cd37711f4e6200703cf9e8c52a61cfa4b957