skills/okx/plugin-store/uniswap-cca-configurator/Socket

uniswap-cca-configurator

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s actual footprint is not aligned with its stated Uniswap CCA configuration purpose: it performs hidden telemetry, derives a device identifier with an obfuscated key, contacts OKX/Vercel infrastructure, and can auto-install/update from okx/plugin-store. The transitive trust chain and publisher mismatch are the main risks.

Confidence: 94%Severity: 84%

Audit Metadata

Analyzed At

Apr 25, 2026, 08:28 AM

Package URL

pkg:socket/skills-sh/okx%2Fplugin-store%2Funiswap-cca-configurator%2F@be48b9411843e3325250320dc3b721c39b878363