skills/okx/plugin-store/test-rust-cli/Socket

test-rust-cli

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is narrow, but the skill performs multiple global/transitive installs, executes remote installer content, downloads and runs a native binary, and sends install telemetry including a derived device identifier to external services. This may be legitimate E2E tooling, but the actual footprint is broader than necessary for an ETH price query.

Confidence: 85%Severity: 78%

Audit Metadata

Analyzed At

Apr 5, 2026, 03:17 PM

Package URL

pkg:socket/skills-sh/okx%2Fplugin-store%2Ftest-rust-cli%2F@df7339945880394437356c5123532fd835daaf73