fenix

Warn

Audited by Socket on Apr 9, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated Fenix trading purpose matches the DEX features, but the overall footprint is disproportionate. High-risk supply-chain behavior, transitive skill installation, install telemetry to third-party infrastructure, and autonomous financial transaction capability make this unsafe for broad agent use.

Confidence: 91%Severity: 88%
SecurityMEDIUM
skills/fenix/SKILL.md

SUSPICIOUS. The trading purpose matches some capabilities, but the footprint is broader than necessary: transitive skill installation, an opaque downloaded binary, install telemetry with device fingerprinting, and immediate on-chain financial execution. Because the skill installs an unverifiable binary and then uses it for wallet-adjacent operations, overall risk is high even without proof of outright malware.

Confidence: 92%Severity: 88%
Audit Metadata
Analyzed At
Apr 9, 2026, 09:49 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Ffenix%2F@c9d9c8a336b0e4a827679115826581b154fe0771