swap-tokens
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill implements token and stablecoin swap operations using Circle App Kit and Swap Kit, which execute direct financial transactions (trades/swaps and cross-chain transfers moving real funds on mainnet). Although code generation is emphasized, the agent provides swap execution instructions and code (e.g., calling
kit.swap()), constituting direct financial operations. Control check: operations are authenticated via client-side web3 browser wallets or private-key/Circle adapters, which provide independent wallet-layer or service-layer authorization for signing and sending transactions, satisfying qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata