ton-swap

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill is purpose-aligned and shows no clear credential theft or malicious exfiltration, but it grants an AI agent the ability to execute real token trades on TON. That autonomous financial-action capability is inherently high risk, and the transitive reference to ton-create-wallet plus the unspecified quote backend add trust uncertainty.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Mar 18, 2026, 10:42 PM
Package URL
pkg:socket/skills-sh/ton-connect%2Fkit%2Fton-swap%2F@645ffb26ca7cf4102374db04e6352e893b7c0c95