Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Chord market-data and unsigned-swap helper that sends quote details to Chord but does not sign or move funds itself.
Install only if you are comfortable with Chord receiving wallet addresses, token selections, amounts, and quote/simulation details. Never provide a private key or seed phrase, and only sign in your own wallet after checking the chain, token addresses, approval spender, approval amount, router, and minimum received. Be aware that the docs also expose a read-only backtest feature for perps/FX/metals despite the manifest saying perps are out of scope.
The skill declares broad network and helper-script usage but does not define an explicit tool/permission scope. That creates unnecessary ambient authority: an integrating agent may permit file writes or arbitrary outbound requests beyond the intended API-only behavior, increasing the blast radius if the skill is misused or if downstream content becomes adversarial.
The manifest explicitly says not to use the skill for 'perps or limit orders' and frames the skill around on-chain market data, swap quotes, and unsigned swap transactions. However, the documented intent table includes 'Backtest a strategy on a perp, FX pair or gold' via /v1/backtest, which expands the skill into derivatives/strategy analysis outside the stated scope.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
## The boundary: read and prepare, never sign
- **Read-only, run without asking:** every GET above, `/v1/meta/quote` **without** a wallet,
`/v1/quote`, `/v1/swap/simulate`.
- **Fund-moving, needs the user's confirmation first:** `POST /v1/meta/swap`, `/v1/meta/quote` with
`taker` (it returns a transaction), `chord.py meta-swap`, `chord_swap_tx`, `chord_quote` with a
The manifest explicitly says not to use this skill for perps or general out-of-scope markets, and otherwise frames Chord around on-chain market data, swap quotes, unsigned swaps, wallet/PnL, and liquidity on listed EVM chains plus Solana data. This file documents /v1/backtest for Hyperliquid perps and Dukascopy FX/metals, which is a materially different capability than the manifest claims.
This skill instructs the agent to send wallet addresses, token selections, and swap parameters to an external API endpoint. Even though the endpoint is the expected Chord service and the calls are necessary for quoting/building unsigned swaps, it still transmits user-linked financial activity off-platform to a third party, creating privacy and data-handling risk.
Raw:
curl -s "https://api.getchord.xyz/v1/meta/quote?chain=8453&tokenIn=0x833589fcd6edb6e08f4c7c32d4f71b54bda02913&tokenOut=0x4200000000000000000000000000000000000006&amount=10000000&slippageBps=50&taker=0xYourWallet"
curl -s -X POST https://api.getchord.xyz/v1/meta/swap -H 'Content-Type: application/json' \
-d '{"chain":8453,"tokenIn":"0x8335...2913","tokenOut":"0x4200...0006","amount":"10000000","slippageBps":50,"taker":"0xYourWallet"}'
This skill instructs the agent to send wallet addresses, token selections, and swap parameters to an external API endpoint. Even though the endpoint is the expected Chord service and the calls are necessary for quoting/building unsigned swaps, it still transmits user-linked financial activity off-platform to a third party, creating privacy and data-handling risk.
Raw:
curl -s "https://api.getchord.xyz/v1/meta/quote?chain=8453&tokenIn=0x833589fcd6edb6e08f4c7c32d4f71b54bda02913&tokenOut=0x4200000000000000000000000000000000000006&amount=10000000&slippageBps=50&taker=0xYourWallet"
curl -s -X POST https://api.getchord.xyz/v1/meta/swap -H 'Content-Type: application/json' \
-d '{"chain":8453,"tokenIn":"0x8335...2913","tokenOut":"0x4200...0006","amount":"10000000","slippageBps":50,"taker":"0xYourWallet"}'
The quote endpoint sends token addresses, chain selection, and trade size to an external service. While this is a read-only quote path and less dangerous than swap construction, it still exposes potentially sensitive trading intent and could leak strategy or wallet-associated behavior if correlated elsewhere.
Raw call, if you cannot run Python:
curl -s "https://api.getchord.xyz/v1/quote?chain=8453&inputMint=0x833589fcd6edb6e08f4c7c32d4f71b54bda02913&outputMint=0x940181a94a35a4569e4529a3cdfb74e38fd98631&amount=50000000&slippageBps=50"
amount is in the input token's smallest unit, as a decimal string: human x 10^decimals. 50 USDCThe POST /v1/swap flow sends the full quote body and the user's wallet address to an external service that returns transaction calldata. In this context, the external service materially influences a fund-moving transaction payload, so compromise, spoofing, or insufficient validation could cause the user to sign a malicious or incorrect transaction.
Raw call: POST /v1/swap with the quote body unmodified:
curl -s -X POST https://api.getchord.xyz/v1/swap -H 'Content-Type: application/json' \
-d '{"quoteResponse": <the /v1/quote JSON>, "userPublicKey": "0xUSER_WALLET", "slippageBps": 50, "chain": 8453}'
The POST /v1/swap flow sends the full quote body and the user's wallet address to an external service that returns transaction calldata. In this context, the external service materially influences a fund-moving transaction payload, so compromise, spoofing, or insufficient validation could cause the user to sign a malicious or incorrect transaction.
Raw call: POST /v1/swap with the quote body unmodified:
curl -s -X POST https://api.getchord.xyz/v1/swap -H 'Content-Type: application/json' \
-d '{"quoteResponse": <the /v1/quote JSON>, "userPublicKey": "0xUSER_WALLET", "slippageBps": 50, "chain": 8453}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# Solana on Chord
Chord reads Solana from its own tape and serves it under `https://api.getchord.xyz/v1/chains/solana/*`.
Every call is a plain GET, no key needed (60 requests a minute per IP).
**Swaps are in beta and not open to API keys yet.** `/v1/sol/trade/*` quotes SOL ↔ one token by
No suspicious patterns detected.