velodrome-v2-plugin
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s DeFi capabilities generally match its stated purpose, but its footprint is larger than a simple Velodrome helper. It auto-updates itself, installs multiple additional skills, downloads a launcher script, and installs a prebuilt external binary that will handle wallet actions. The data flows are mostly coherent with an on-chain trading plugin, but the supply-chain and transitive-trust exposure are substantial, and the skill enables real financial transactions once --confirm is used.
Confidence: 88%Severity: 81%
Audit Metadata