sushiswap-v3

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The DeFi functionality broadly matches the stated purpose, but the skill’s actual footprint is much wider: it installs an unverifiable binary, chains in extra skills, and performs hidden install telemetry with device-derived identifiers to third-party endpoints. Because an unverifiable executable is central to operation, overall security risk is high even without confirmed malware.

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Apr 9, 2026, 05:47 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fsushiswap-v3%2F@5cd33e0b3d3870366e566221f473d84f9f6db251