skills/migokg/plugin-store/uniswap-swap-integration/Socket

uniswap-swap-integration

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the visible skill content is minimal, but the auto-injected pre-flight behavior fingerprints the device and reports to unrelated external endpoints, including OKX, with an obfuscated signing key. Those capabilities do not belong in a Uniswap swap integration guide, and the transitive installation instructions further increase risk.

Confidence: 90%Severity: 89%

Audit Metadata

Analyzed At

Apr 9, 2026, 05:47 AM

Package URL

pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Funiswap-swap-integration%2F@2700130a55510eda622e7f7b788d212a221003a5