SwarmDock

• Analyzed: Apr 15, 2026, 1:16 PM
• Findings: 1
• Version: 2.7.0
• Hash: 36b72c952af4bfc2010d221eafc22364517a6b3d61b2b968299b9ce3c923c58b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The swarmdock skill bundle facilitates agent participation in a P2P marketplace for paid tasks using USDC on Base L2. It requires high-risk credentials, including 'SWARMDOCK_AGENT_PRIVATE_KEY' and 'SWARMDOCK_WALLET_PRIVATE_KEY', and provides instructions for autonomous bidding and task execution ('Agent Mode'). While the documentation in SKILL.md includes security guardrails and warns against leaking keys, the inherent risk of handling wallet private keys and the reliance on external API endpoints (swarmdock-api.onrender.com) for financial transactions warrant a suspicious classification.