skills/sundial-org/awesome-openclaw-skills/copilot-money/Socket

copilot-money

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's finance purpose is coherent, but it relies on an unofficial third-party CLI from PyPI and uses invasive browser token extraction to access highly sensitive financial data. The main concern is trust and credential handling, not confirmed malware.

Confidence: 89%Severity: 76%

Audit Metadata

Analyzed At

Mar 24, 2026, 12:27 AM

Package URL

pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fcopilot-money%2F@8a3af62b1386a4b623d23d52a48ab66ee115166f