1inch-mcp-server

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly coherent and vendor-aligned 1inch integration skill. Main risks are unpinned execution of a third-party npm bridge for stdio clients, credential forwarding through that bridge, and the built-in ability to initiate financial blockchain actions; data flows otherwise go to official 1inch endpoints and appear proportionate to the stated purpose.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Sep 15, 2026, 08:39 AM
Package URL
pkg:socket/skills-sh/1inch%2F1inch-ai%2F1inch-mcp-server%2F@bc36de98c78a2e500694058de7bca7db524337ecbc00044b0f2dcf13dad533c1