Uniswap Self Funding Setup

• Outcome: Review
• Latest audit: May 28, 2026 at 11:29 AM UTC
• Version:
  0.1.0

Overview

This skill appears purpose-aligned for crypto setup work, but it gives an agent financially sensitive authority without a clear mandatory confirmation gate.

Review this carefully before installing. Use it only with wallets and chains you explicitly intend to configure, require the agent to present a plan and wait for your confirmation before any transaction or deployment, and avoid granting access to unrelated files, credentials, or production wallets.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: This skill is designed to orchestrate multiple financially sensitive and partially irreversible actions, including wallet provisioning, token deployment, liquidity setup, treasury configuration, and on-chain identity registration. Although the notes mention irreversibility later in the document, the skill description and workflow do not require an explicit upfront user confirmation gate before execution, which creates a real risk of unintended blockchain transactions, asset movement, or permanent token deployment from an ambiguous or casually phrased request.

VirusTotal

66/66 vendors flagged this skill as clean.