bitflow-swap-aggregator

Fail

Audited by Snyk on Oct 1, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill executes token swaps on the Stacks blockchain via the Bitflow SDK, which involves moving funds and interacting with financial smart contracts as part of its advertised decentralized finance function.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documentation explicitly describes a crypto/blockchain swap aggregator (bitflow-swap-aggregator) that executes token swaps, interacts with wallet signing, and broadcasts blockchain transactions to move funds on mainnet.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 1, 2026, 05:03 AM
Issues
2