Mercury

• Analyzed: Apr 30, 2026, 4:02 PM
• Findings: 1
• Version: 1.0.2
• Hash: ab658e7cdec79610c86c6c1cf267fcc4c4e5bb54071d436483023a6c53f0ae8e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a standard integration for Mercury (banking) using the Membrane CLI. While it involves high-risk financial operations (e.g., listing transactions and managing recipients) and requires the global installation of a third-party CLI (@membranehq/cli), these actions are consistent with the stated purpose of the skill. There is a documentation discrepancy in SKILL.md where it incorrectly links to the Mercury Postlight web parser instead of Mercury.co, but this appears to be a non-malicious documentation error rather than an intentional attempt to deceive the agent.