mainstream-spot-order

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s trading, data collection, and wallet operations are aligned with its stated purpose, but it enables autonomous real-money crypto trading and depends on a powerful external CLI with inconsistent install instructions versus official evidence. The main concern is high operational and supply-chain risk, not confirmed malware.

Confidence: 91%Severity: 84%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fmainstream-spot-order%2F@49178f1ac9a0bbdf988030335640a82b0b50fe687c680751811804756992ccba