Uniswap Batch Swap

• Analyzed: May 12, 2026, 3:47 AM
• Findings: 1
• Version: 0.1.0
• Hash: 5fc9789d3e66f94bb0d1922446e135363d0f37bd283f9e4dfba89a74567ac485
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to the broad file system access granted to the AI agent via `Read`, `Glob`, and `Grep` in the `allowed-tools` section of `SKILL.md`. While the skill's stated purpose and workflow are benign (executing token swaps), these powerful tools introduce a significant prompt injection vulnerability. An attacker could craft a malicious prompt to instruct the agent to read sensitive files (e.g., credentials, configuration) or list directories, potentially leading to unauthorized information disclosure, even though the skill itself does not explicitly instruct such actions.