swap-tokens

Warn

Audited by Snyk on Oct 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill implements token and stablecoin swap operations using Circle App Kit and Swap Kit, which execute direct financial transactions (trades/swaps and cross-chain transfers moving real funds on mainnet). Although code generation is emphasized, the agent provides swap execution instructions and code (e.g., calling kit.swap()), constituting direct financial operations. Control check: operations are authenticated via client-side web3 browser wallets or private-key/Circle adapters, which provide independent wallet-layer or service-layer authorization for signing and sending transactions, satisfying qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 9, 2026, 10:11 PM
Issues
1