xaut-trade

• Analyzed: May 11, 2026, 5:29 AM
• Findings: 1
• Version: 2.3.0
• Hash: 697a2d4664e586807d6f9976c208f6a1ff2e7e95204833fb6d047e264345f197
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a well-architected and professional tool for trading XAUT on Ethereum. It demonstrates high security standards, including a TTY gate in 'export-seed.js' that prevents the AI agent from accessing or displaying the wallet's seed phrase in chat logs. It also includes 'CANONICAL_TOKENS' and 'CANONICAL_CONTRACTS' checks in 'lib/config.js' to detect and prevent tampering with contract addresses. The only external communication beyond standard blockchain RPCs and the UniswapX API is an optional activity rankings feature (xaue.com), which is strictly opt-in and requires explicit user confirmation during setup.