swapper-deposit
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions for developers to install the
@swapper-finance/deposit-sdkpackage via npm. This package and the associated swapper.finance domain are official resources belonging to the skill author's organization. - [COMMAND_EXECUTION]: The skill instructs the agent to use system commands such as
open(macOS),xdg-open(Linux), orstart(Windows) to automatically launch the generated deposit URL in the user's default web browser. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface where it processes user-provided inputs including
depositWalletAddress,dstChainId, anddstTokenAddrto construct a deposit URL. - Ingestion points: User-supplied wallet addresses and token identifiers in
SKILL.md. - Boundary markers: The skill explicitly requires the agent to instruct the user to verify all transaction details on the destination page before confirming.
- Capability inventory: The skill uses shell commands to open browser windows.
- Sanitization: No specific input sanitization is defined for the interpolated variables, but the resulting URL is restricted to the vendor's domain.
Audit Metadata