swap-execute-fast

Warn

Audited by Socket on Mar 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill's stated purpose (instant, no-confirmation swaps) is fundamentally at odds with standard safety expectations for high-value on-chain actions. While the design includes multiple safety checks (honeypot/FOT, pre-step verbal confirmation in the broader pattern, registry resolution), the explicit capability to build and broadcast a transaction without user confirmation makes it highly risky. Credential handling practices (plaintext password in development guidance) further increase risk, and the overall data flow exposes sensitive input (sender/recipient addresses, tokens) to network and local storage risk. In production, this skill would be classified as HIGH risk with serious data-flow and credential risks; it should not be considered benign without strong, enforced confirmation gates, hardened credential management, and verifiable, auditable code-signing for the involved shell scripts.

Confidence: 98%Severity: 75%
Audit Metadata
Analyzed At
Mar 10, 2026, 04:22 AM
Package URL
pkg:socket/skills-sh/KyberNetwork%2Fkyberswap-skills%2Fswap-execute-fast%2F@ad2be44b90f9dd1875239622d86643b8750d47c5