v4-sdk-integration
Warn
Audited by Snyk on Oct 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required workflow uses
WebFetchto read Uniswap documentation pages, which constitutes low-risk exposure to web content.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents direct token swaps, trades, and liquidity management operations using the Uniswap v4 SDK and Universal Router/PositionManager contracts. These operations execute financial transactions on-chain via wallet client write calls. While client-side signatures or local wallet keys are typically involved, no independent access control (such as server-side authentication or an external authorization layer) is enforced by the service or execution layer for the payment route itself, leading to an unmitigated direct financial operation.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata