Trust Status
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
—Prompt-injection scan · findings+0/30
→ Publisher: remove instructions in the source aimed at AI clients rather than human readers
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface33 tools · none privileged
Security scan⚠ Warnings (3)vlive · 1d ago
PROMPTtool:fx_timing_advisorConcealment directive aimed at the model
PROMPTtool:mcp_registerLinks to undeclared domain: ohmyfin.ai
PROMPTtool:track_paymentConcealment directive aimed at the model
PROMPTtool:track_paymentLinks to undeclared domain: ohmyfin.ai
PROMPTtool:ssi_lookupConcealment directive aimed at the model
PROMPTtool:ssi_lookupLinks to undeclared domain: ohmyfin.ai
EvalsNone
IndexedJun 12, 2026
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.