ton-swap
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data to generate blockchain transactions, which represents an attack surface where malicious input could influence financial operations.
- Ingestion points: User-supplied token names and swap amounts processed in the Workflow section of SKILL.md.
- Boundary markers: The skill implements a mandatory dry-run verification via emulate_transaction and requires explicit user confirmation before any transaction is sent.
- Capability inventory: The skill uses MCP tools send_raw_transaction and emulate_transaction to interact with the TON blockchain and execute financial transfers.
- Sanitization: The instructions rely on user review and transaction emulation results rather than programmatic sanitization of user-provided strings.
Audit Metadata