uniswap-pay-with-any-token

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with a Uniswap payment use case, but it delegates functionality through transitive skill/plugin installation and targets autonomous token payments, which are inherently high-risk real-world actions. The snippet does not show clear approval boundaries or data-flow details, so risk is medium-high even without direct evidence of malware.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Apr 4, 2026, 09:26 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store-community%2Funiswap-pay-with-any-token%2F@5b194ddc4c25ac6b68825ac33fdc9de247257a01