orca
Warn
Audited by Socket on Apr 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated Orca trading purpose broadly matches the trading capabilities, but the footprint is expanded by remote installer execution, an unverifiable downloaded binary, transitive skill installation, and unrelated install telemetry to vercel.app/OKX. The financial-action capability is expected for a swap skill, yet the install and reporting paths make the overall skill higher risk than its purpose requires.
Confidence: 90%Severity: 86%
Audit Metadata