dca-bot
Warn
Audited by Socket on Jul 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and core data flows are mostly coherent with a DCA trading bot, and it points to official Uniswap execution paths rather than an obvious credential-harvesting proxy. The main risk is that it enables autonomous financial transactions and has somewhat broader runtime permissions and transitive skill trust than a thin strategy layer strictly needs.
Confidence: 85%Severity: 63%
Audit Metadata