uniswap-ai

Warn

Audited by Socket on Apr 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the visible content is not mainly Uniswap tooling but install telemetry plus a transitive skill install. Same-org documentation makes the install command somewhat credible, but device fingerprinting, obfuscated token generation, and reporting to Vercel/OKX are disproportionate to the stated purpose and weaken data-flow integrity.

Confidence: 91%Severity: 76%
Audit Metadata
Analyzed At
Apr 12, 2026, 01:31 PM
Package URL
pkg:socket/skills-sh/MigOKG%2Fplugin-store%2Funiswap-ai%2F@80477a74d61f108526a37c0ec6940ae01cf0ffad