v4-sdk-integration

Warn

Audited by Snyk on Oct 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow uses WebFetch to read Uniswap documentation pages, which constitutes low-risk exposure to web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents direct token swaps, trades, and liquidity management operations using the Uniswap v4 SDK and Universal Router/PositionManager contracts. These operations execute financial transactions on-chain via wallet client write calls. While client-side signatures or local wallet keys are typically involved, no independent access control (such as server-side authentication or an external authorization layer) is enforced by the service or execution layer for the payment route itself, leading to an unmitigated direct financial operation.

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 26, 2026, 02:00 AM
Issues
2