pancakeswap-v2-plugin

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s crypto trading purpose aligns with its wallet and transaction capabilities, and the install sources appear to be official OKX-owned repos with documented paths and checksum checks. However, it expands trust through transitive skill installation, self-updates from mutable remote content, and installs/runs an external binary plus launcher, so the overall footprint is higher risk than a simple documentation or API skill.

Confidence: 93%Severity: 66%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:01 PM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fpancakeswap-v2-plugin%2F@5d1bda4f1767e6601055331322ebfc2af0f3447af360458bc68be02f069544a1