raydium

Warn

Audited by Socket on Oct 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches DeFi trading on Raydium, but the skill's actual footprint is higher risk because it enables autonomous financial actions and routes a Solana private key into a non-official third-party wrapper (clodds/solana/raydium) rather than the verified @raydium-io SDK path. No direct malware indicators or command injection are present, but credential-forwarding and supply-chain trust are not proportionate for a wallet-signing skill.

Confidence: 89%Severity: 81%
Audit Metadata
Analyzed At
Oct 19, 2026, 05:21 AM
Package URL
pkg:socket/skills-sh/alsk1992%2Fcloddsbot%2Fraydium%2F@e5c3e8ef9106384a6530955627f4e0e2a6148ab32284ea4161a80dc8eb0937f9