swap-integration

Warn

Audited by Snyk on Oct 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill provides instructions and code examples for integrating Uniswap token swaps, trades, and routing operations (direct financial operations such as executing swaps via the Trading API or Universal Router SDK). However, transaction signing and submission rely on client-side wallet interactions (such as viem's walletClient.sendTransaction or user signatures), and there is no independent, service-enforced access control on the swap execution itself within the skill's documented configuration (access control is handled locally by the user's wallet/private keys or required user confirmation prompts like SKILL.md:111-112, rather than an independent execution-layer validation).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 28, 2026, 02:25 AM
Issues
1