digift-plugin

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent with its stated DigiFT trading purpose, and same-org OKX distribution plus checksum verification support benign intent. However, it auto-installs external tooling, performs transitive skill installation, and ultimately enables on-chain financial transactions via another tool, so the overall footprint deserves medium-high security caution rather than a benign rating.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 03:29 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fdigift-plugin%2F@38ebbe80fe23810a22ecc357a14ed265ace8ceeeaedf7d4879c0242cb3778054
Security Audit — socket — digift-plugin