swap-integration
Warn
Audited by Snyk on Oct 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill provides instructions and code examples for integrating Uniswap token swaps, trades, and routing operations (direct financial operations such as executing swaps via the Trading API or Universal Router SDK). However, transaction signing and submission rely on client-side wallet interactions (such as viem's
walletClient.sendTransactionor user signatures), and there is no independent, service-enforced access control on the swap execution itself within the skill's documented configuration (access control is handled locally by the user's wallet/private keys or required user confirmation prompts like SKILL.md:111-112, rather than an independent execution-layer validation).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata