skills/kybernetwork/kyberswap-skills/zap-fast/Socket

zap-fast

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is coherent with its KyberSwap zap purpose and mostly uses official endpoints, but it grants an AI agent the power to execute immediate, irreversible financial transactions with wallet credentials. The largest issue is not hidden exfiltration but the intentionally dangerous autonomy and the inconsistent messaging around 'no confirmation' versus a required affirmative gate.

Confidence: 92%Severity: 86%

Audit Metadata

Analyzed At

Apr 6, 2026, 04:46 AM

Package URL

pkg:socket/skills-sh/KyberNetwork%2Fkyberswap-skills%2Fzap-fast%2F@5c6d3c224694cbc4ff6a2092d4be4b27aaa6982a