uniswap-ai

SUSPICIOUS: the wrapper is broadly consistent with Uniswap tooling, but its actual footprint is mostly transitive trust. The biggest concern is that a skill claiming Uniswap maintenance can direct updates through a separate OKX plugin-store path, plus it installs downstream code that can perform financial actions. No confirmed credential theft or overt malware is shown, but the trust and autonomy risks are significant.