skills/aibtcdev/skills/jingswap/Socket

jingswap

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is purpose-aligned for a DeFi auction client and does not show obvious credential theft or hidden exfiltration, so it is not malware. However, it is inherently high risk because it authorizes autonomous wallet-backed financial transactions and market-state transitions with real fund impact.

Confidence: 85%Severity: 74%

Audit Metadata

Analyzed At

Oct 1, 2026, 05:05 AM

Package URL

pkg:socket/skills-sh/aibtcdev%2Fskills%2Fjingswap%2F@0d7b155aaf003efffe2a2da1cce8cb958ad96031ce1eee64910d8f52b4371fb5