swapper-integration
Audited by Socket on Mar 3, 2026
1 alert found:
SecurityThe Swapper Integration Skill fragment is a coherent, well-scoped scaffold intended to guide developers through researching, implementing, testing, and documenting swapper integrations. It emphasizes strong typing, monadic error handling, and careful API interaction patterns. The primary supply-chain risks arise from external documentation/SDK sourcing and secret management (API keys in environment variables). No executable payloads or credential exfiltration patterns are present in the fragment itself. The template is largely benign, but care must be taken to vet external sources, enforce secret-handling best practices, and ensure domain allowlists and verifiable endpoints in any real deployment.