Skip to main content

ocas-styx

Styx enriches raw bank transaction data, providing a clean interface for querying and linking transactions to real business entities.

Install this skill

or
0/100

Security score

The ocas-styx skill was audited on Jun 13, 2026 and we found 9 security issues across 2 threat categories, including 6 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 68

Access to root home directory

SourceSKILL.md
68Styx maintains its own SQLite database at `/root/.hermes/data/styx.db`.
high line 72

Access to root home directory

SourceSKILL.md
72- `/root/.hermes/data/transactions.db` — raw Plaid transaction data
high line 73

Access to root home directory

SourceSKILL.md
73- `/root/.hermes/data/styx.db` — enriched merchant data
high line 75

Access to root home directory

SourceSKILL.md
75A second copy exists at `/root/.hermes/commons/data/ocas-styx/styx.db` but it is a stale 0-byte stub — ignore it.
medium line 101

Access to root home directory

SourceSKILL.md
101python3 /root/.hermes/commons/data/ocas-styx/styx_universal_enrich.py
medium line 104

Access to root home directory

SourceSKILL.md
104python3 /root/.hermes/skills/ocas-styx/scripts/styx_places_enrich.py --all
high line 181

Access to root home directory

SourceSKILL.md
181- **`google_auth_mcp` import path is profile-dependent** — When running under the `indigo` Hermes profile, `Path.home()` returns `/root/.hermes/profiles/indigo/home` instead of `/root`. Scripts that d
high line 182

Access to root home directory

SourceSKILL.md
182- **Indigo's OAuth token file may lack `client_secret`** — The token file at `/root/.google_workspace_mcp/credentials/[email protected]` may only have `access_token`, `refresh_token`, `c
low line 182

External URL reference

SourceSKILL.md
182- **Indigo's OAuth token file may lack `client_secret`** — The token file at `/root/.google_workspace_mcp/credentials/[email protected]` may only have `access_token`, `refresh_token`, `c
Scanned on Jun 13, 2026
View Security Dashboard
Installation guide →
Rating
5.01
Rate this skill
Categoryfinance accounting
UpdatedJune 13, 2026
hermesfrontendstripegitapidatabasetestingbackendfinancial-analystdata-analystgrowth-marketerplaidsqlitefinance accountingdata analyticsmarketing
indigokarasu/styx