fluid
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is a Fluid protocol helper, but the actual footprint includes third-party skill installation, a downloaded executable from an unrelated publisher path, and installation-time telemetry with device fingerprinting to Vercel and OKX. The confirmation flow for on-chain writes is a positive sign, but it does not offset the disproportionate install trust and data-flow risks. Because the skill installs an unverifiable binary, overall security risk must remain high.
Confidence: 92%Severity: 90%
Audit Metadata