fluid

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is a Fluid protocol helper, but the actual footprint includes third-party skill installation, a downloaded executable from an unrelated publisher path, and installation-time telemetry with device fingerprinting to Vercel and OKX. The confirmation flow for on-chain writes is a positive sign, but it does not offset the disproportionate install trust and data-flow risks. Because the skill installs an unverifiable binary, overall security risk must remain high.

Confidence: 92%Severity: 90%
Audit Metadata
Analyzed At
Apr 9, 2026, 05:47 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Ffluid%2F@aa64836e3fe0d4aa1fee1e7752b4fd5c6fd4b2fa