rwa-alpha

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally aligned with its stated trading purpose and mostly uses proportionate data flows, but it enables autonomous cryptocurrency/RWA trading through an external CLI and can trigger irreversible on-chain actions. Official same-org provenance for onchainos lowers supply-chain concern, yet the financial autonomy and optional third-party credential forwarding keep overall risk high.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Oct 8, 2026, 09:00 PM
Package URL
pkg:socket/skills-sh/okx%2Fplugin-store%2Frwa-alpha%2F@4d6e48b4745cd2979bdd6a95674d2f06450dcdf4a4185353047219751e4d4692