Uniswap Monitor Tokenjar

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:29 AM UTC
• Version:
  0.1.0

Overview

This is a read-only Uniswap TokenJar monitoring skill with no evidence of hidden execution, credential access, or data exfiltration.

Install this if you want an agent to query Uniswap TokenJar data and produce monitoring dashboards or short live updates. Be aware that generic requests about "protocol fees" may activate this skill even when you meant another domain or an execution-oriented workflow; confirm the context is Uniswap TokenJar before relying on its analysis.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The trigger phrase "Monitor protocol fees" is broad enough to match user requests about unrelated fee-monitoring domains, causing the skill to activate outside its intended Uniswap TokenJar context. While the skill is read-only, misrouting can still produce incorrect analysis, irrelevant tool calls, and confusion that may influence downstream user decisions.

VirusTotal

66/66 vendors flagged this skill as clean.