skills/purong-huang-1121/skills-store/dapp-composer/Socket

dapp-composer

Warn

Audited by Socket on Mar 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated routing purpose does not justify installing an unverifiable third-party CLI from a personal GitHub account, then handing it wallet private keys and OKX API credentials to perform automated trading and leveraged on-chain actions. The main risk is untrusted installer provenance plus credential forwarding and autonomous financial execution.

Confidence: 91%Severity: 90%

Audit Metadata

Analyzed At

Mar 15, 2026, 03:52 AM

Package URL

pkg:socket/skills-sh/purong-huang-1121%2Fskills-store%2Fdapp-composer%2F@def5ab27e1bb73eefafd4debca4ceb3c99ad1d85