bitflow-swap-aggregator
Fail
Audited by Snyk on Oct 1, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The skill executes token swaps on the Stacks blockchain via the Bitflow SDK, which involves moving funds and interacting with financial smart contracts as part of its advertised decentralized finance function.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation explicitly describes a crypto/blockchain swap aggregator (
bitflow-swap-aggregator) that executes token swaps, interacts with wallet signing, and broadcasts blockchain transactions to move funds on mainnet.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata