zap-fast

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned with fast zap execution and uses first-party KyberSwap endpoints plus official Foundry sources, so it does not look like credential-harvesting malware. However, it enables immediate irreversible crypto transactions, can use env private keys, and relies on an unreviewed local execution script; this makes it high security risk even though malicious intent is not established.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 24, 2026, 11:38 PM
Package URL
pkg:socket/skills-sh/kybernetwork%2Fkyberswap-skills%2Fzap-fast%2F@f67b86d6f1a6b10acfe4284033c4025c1361e15b89a5e0101727de8a93a4044a