skills/ton-org/kit/ton-swap/Socket

ton-swap

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill is coherent with its stated TON swap purpose, and no explicit credential theft or malicious installer is shown. However, it enables real-money blockchain actions, depends on opaque MCP backends for quote/emulation/send, and references another skill for wallet setup, so the risk is elevated even with a confirmation step.

Confidence: 86%Severity: 72%

Audit Metadata

Analyzed At

Jul 31, 2026, 09:51 AM

Package URL

pkg:socket/skills-sh/ton-org%2Fkit%2Fton-swap%2F@b6762f3a6fc78adefb64324cf56369ab604266d8537aa2ded60032ac6f3ed79b