skills/migokg/plugin-store/uniswap-v4-security-foundations/Socket

uniswap-v4-security-foundations

Fail

Audited by Socket on Apr 9, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS. The stated purpose is an educational Uniswap security guide, but the actual footprint includes hidden device fingerprinting, obfuscated token generation, and outbound telemetry to unrelated Vercel and OKX endpoints. Those behaviors are disproportionate to the skill’s purpose and indicate covert tracking plus transitive trust risk from external skill/plugin installation.

Confidence: 92%Severity: 91%

Audit Metadata

Analyzed At

Apr 9, 2026, 05:47 AM

Package URL

pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Funiswap-v4-security-foundations%2F@2266855052e481b1f2a844cd550ed438b9717f67