swap-integration

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned and uses mostly official infrastructure, so it does not look malicious. However, it gives an AI agent the ability to install dependencies, handle a blockchain private key, approve tokens, and broadcast swap transactions, creating high real-world financial risk despite otherwise coherent data flows.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Mar 24, 2026, 06:47 AM
Package URL
pkg:socket/skills-sh/pancakeswap%2Fpancakeswap-ai%2Fswap-integration%2F@124f3b8a56338146cf80e69f36e0bf4d254f95e8