uniswap-swap-integration

Warn

Audited by Socket on Apr 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the snippet is short and not overtly malicious, but it primarily instructs installation of another remote skill/plugin, creating a transitive trust chain. The Uniswap publisher claim is plausible, yet the referenced source naming inconsistency reduces install trust, and the crypto-trading purpose raises real-world action risk without visible safeguards.

Confidence: 77%Severity: 72%
Audit Metadata
Analyzed At
Apr 4, 2026, 09:25 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store-community%2Funiswap-swap-integration%2F@cbe2a08fdb376cd9312ab1d1b0006c1836b41b98