1inch-mcp-server
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Mostly coherent and vendor-aligned 1inch integration skill. Main risks are unpinned execution of a third-party npm bridge for stdio clients, credential forwarding through that bridge, and the built-in ability to initiate financial blockchain actions; data flows otherwise go to official 1inch endpoints and appear proportionate to the stated purpose.
Confidence: 90%Severity: 76%
Audit Metadata