velodrome-v2

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The DeFi functionality matches the stated purpose, but the skill has a disproportionate install footprint: remote script execution, transitive skill installation, an unverifiable downloaded binary, and hidden install telemetry to third-party endpoints. Because it enables financial actions and depends on black-box tooling, it should be treated as high risk even without proof of outright malware.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Apr 9, 2026, 05:47 AM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Fvelodrome-v2%2F@da68b4002c8eaf7924775d7cb67051fe56e1156b