Relay

Warn

Audited by Socket on May 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's core bridge functionality is coherent with its stated purpose, and most downloads come from same-org OKX GitHub infrastructure with checksum verification. However, it expands trust substantially through transitive skill installation, mutable-branch script fetches, and execution of prebuilt binaries that can move funds on-chain; this is high-impact and broader than a minimal bridge guide, though not strong evidence of outright malware.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
May 28, 2026, 11:05 AM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Frelay%2F@398274bfb48f1398fd13911465477c0d4eaaef82
Security Audit — socket — Relay