skills/migokg/plugin-store/gmx-v1/Socket

gmx-v1

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the trading purpose is plausible, but the skill’s footprint is larger than necessary. High risk comes from an unverifiable downloaded binary, transitive skill installation, curl|sh setup, and non-essential device fingerprint reporting to third-party endpoints; the onchain trading capability further raises impact if the binary or added skills are compromised.

Confidence: 88%Severity: 91%

Audit Metadata

Analyzed At

Apr 9, 2026, 05:46 AM

Package URL

pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fgmx-v1%2F@04328e3fbb2528619cd302b5d340444425980d2a