skills/okx/plugin-store/uniswap-cca-deployer/Socket

uniswap-cca-deployer

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the auto-update mechanism is disproportionate to a simple deployer skill because it fetches mutable version metadata from OKX’s plugin store and can auto-install through a third-party marketplace. This is mainly a supply-chain and transitive-trust risk, not confirmed malware.

Confidence: 89%Severity: 64%

Audit Metadata

Analyzed At

Apr 25, 2026, 08:27 AM

Package URL

pkg:socket/skills-sh/okx%2Fplugin-store%2Funiswap-cca-deployer%2F@d8eb9ed4a126aef7ef5486184e49250367e70d36