skills/migokg/plugin-store/camelot-v3/Socket

camelot-v3

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated DeFi purpose matches the trading features, but the overall footprint is disproportionate. It combines remote install-and-execute behavior, an unverifiable plugin binary, transitive skill installation, device telemetry to third-party endpoints, and AI-enabled financial actions. The onchainos installer has some official same-org evidence, but the camelot-v3 binary and reporting flow keep the skill in high-risk territory.

Confidence: 90%Severity: 87%

Audit Metadata

Analyzed At

Apr 9, 2026, 05:46 AM

Package URL

pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fcamelot-v3%2F@513b88ce831a2fb2250751efade971f09996e4a5