Skip to main content

finta-reference-architecture

Provides a reference architecture for fundraising operations using Finta CRM, enhancing investor management and pipeline visibility.

Install this skill

or
75/100

Security score

The finta-reference-architecture skill was audited on May 17, 2026 and we found 9 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 42

Template literal with variable interpolation in command context

SourceSKILL.md
42const investors = await this.cache.getOrFetch(`round:${roundId}:investors`,
medium line 50

Template literal with variable interpolation in command context

SourceSKILL.md
50await this.cache.invalidate(`investor:${investorId}`);
medium line 78

Template literal with variable interpolation in command context

SourceSKILL.md
78if (event.toStage === 'committed') await this.notifySlack(`${event.investorName} committed $${event.amount}`);
low line 33

Webhook reference - potential data exfiltration

SourceSKILL.md
33Zapier Webhooks ──→ Slack / Sheets / CRM
low line 65

Webhook reference - potential data exfiltration

SourceSKILL.md
65// Stage-change webhooks flush investor cache immediately for dashboard accuracy
medium line 96

Webhook reference - potential data exfiltration

SourceSKILL.md
96- Batch Zapier webhook deliveries to avoid per-event overhead during rapid stage updates
low line 71

Access to .env file

SourceSKILL.md
71private queue = new Bull('finta-events', { redis: process.env.REDIS_URL });
low line 110

External URL reference

SourceSKILL.md
110- [Finta Website](https://www.trustfinta.com)
low line 111

External URL reference

SourceSKILL.md
111- [Finta for Fund Managers](https://www.trustfinta.com/blog/finta-for-fund-managers-venture-capital-crm)
Scanned on May 17, 2026
View Security Dashboard
Installation guide →