Skip to main content

finta-reference-architecture

Provides a reference architecture for fundraising operations using Finta CRM, enhancing investor management and pipeline visibility.

Install this skill

or
75/100

Security score

The finta-reference-architecture skill was audited on May 24, 2026 and we found 9 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 44

Template literal with variable interpolation in command context

SourceSKILL.md
44const investors = await this.cache.getOrFetch(`round:${roundId}:investors`,
medium line 52

Template literal with variable interpolation in command context

SourceSKILL.md
52await this.cache.invalidate(`investor:${investorId}`);
medium line 82

Template literal with variable interpolation in command context

SourceSKILL.md
82if (event.toStage === 'committed') await this.notifySlack(`${event.investorName} committed $${event.amount}`);
low line 34

Webhook reference - potential data exfiltration

SourceSKILL.md
34Zapier Webhooks ──→ Slack / Sheets / CRM
low line 68

Webhook reference - potential data exfiltration

SourceSKILL.md
68// Stage-change webhooks flush investor cache immediately for dashboard accuracy
medium line 102

Webhook reference - potential data exfiltration

SourceSKILL.md
102- Batch Zapier webhook deliveries to avoid per-event overhead during rapid stage updates
low line 75

Access to .env file

SourceSKILL.md
75private queue = new Bull('finta-events', { redis: process.env.REDIS_URL });
low line 118

External URL reference

SourceSKILL.md
118- [Finta Website](https://www.trustfinta.com)
low line 119

External URL reference

SourceSKILL.md
119- [Finta for Fund Managers](https://www.trustfinta.com/blog/finta-for-fund-managers-venture-capital-crm)
Scanned on May 24, 2026
View Security Dashboard