pancakeswap-v2-plugin

Warn

Audited by Socket on May 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s trading and liquidity capabilities match its stated PancakeSwap purpose, so it is not outright malicious. However, it is high risk because it installs and runs downloaded components, transitively installs other skills, and enables autonomous blockchain transactions with real financial consequences; the author/installer mismatch further weakens trust.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
May 13, 2026, 06:49 PM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Fpancakeswap-v2-plugin%2F@a3283b1b2307a4c7db8bf6845ce9dec42476c322