swap-execute-fast
Audited by Socket on Mar 10, 2026
1 alert found:
SecurityThe skill's stated purpose (instant, no-confirmation swaps) is fundamentally at odds with standard safety expectations for high-value on-chain actions. While the design includes multiple safety checks (honeypot/FOT, pre-step verbal confirmation in the broader pattern, registry resolution), the explicit capability to build and broadcast a transaction without user confirmation makes it highly risky. Credential handling practices (plaintext password in development guidance) further increase risk, and the overall data flow exposes sensitive input (sender/recipient addresses, tokens) to network and local storage risk. In production, this skill would be classified as HIGH risk with serious data-flow and credential risks; it should not be considered benign without strong, enforced confirmation gates, hardened credential management, and verifiable, auditable code-signing for the involved shell scripts.