migrator-uniswap-v3
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to use public GitHub deployments (https://github.com/whetstoneresearch/doppler/tree/main/deployments) and links to raw.githubusercontent.com Airlock.sol sources as the authoritative contract source, so the agent will fetch and interpret untrusted public repo content that can change migration/verification actions.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is specifically about Uniswap V3 liquidity migration and explicitly references on-chain migration entrypoints and calls (e.g., Airlock.migrate(asset) and liquidityMigrator.migrate(...)), verification of post-migration balances, and deployed contract addresses. This is a domain-specific crypto financial operation (swapping/migrating liquidity) rather than a generic tool, so it constitutes direct financial execution capability.
Audit Metadata