moonpay-swap-tokens

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is purpose-aligned for token swaps/bridges and uses an official MoonPay CLI path, but it enables high-impact autonomous financial transactions and relies on third-party swaps.xyz for transaction building. The main concern is not malware evidence, but real-world fund movement and external transaction-routing that should only occur with explicit user approval per action.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 22, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/moonpay%2Fskills%2Fmoonpay-swap-tokens%2F@4349813ac9f27fac07a19b72016aa859b4df7b8d429ecf2f9e3dae92b34a76a5