skills/okx/plugin-store/pancakeswap-v3/Socket

pancakeswap-v3

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated PancakeSwap purpose matches the trading/liquidity capabilities, but the skill has disproportionate setup behavior: transitive skill installs, curl|sh bootstrap, opaque external binary use, and hidden install telemetry to Vercel/OKX. The core DEX functionality is plausible, yet the install and reporting footprint is broader than necessary for this purpose.

Confidence: 90%Severity: 83%

Audit Metadata

Analyzed At

Apr 13, 2026, 03:42 AM

Package URL

pkg:socket/skills-sh/okx%2Fplugin-store%2Fpancakeswap-v3%2F@ea7ac87868ffd815213222efa3cc0efc876403f8