Security audit
Security checks across malware telemetry and agentic risk
This skill appears purpose-built for shopping and Solana swaps, but it can spend funds and stores transaction-authorizing credentials and shipping details in plaintext with limited safeguards.
Review before installing. Use this only with a low-balance wallet, confirm every buy or swap yourself, and treat credentials.json as a sensitive file containing both payment authority and shipping PII. Prefer environment variables or a secure secret store for the API key, avoid shared machines, and update or pin dependencies before relying on it for real funds.
**List wallet tokens** → `python swap.py --list` All commands run from `scripts/` folder. API key loads automatically from `credentials.json`. ## Setup (one-time)
def save_credentials(creds: dict) -> bool:
"""Save credentials to credentials.json file."""
try:
with open(CREDS_FILE, "w") as f:
json.dump(creds, f, indent=2)def save_shipping_profile(email: str, address: str, phone: str | None = None) -> bool:
"""
Save shipping profile to credentials.json.
Args:
email: Email for order updatesx402[httpx,svm]>=2.0.0 # Solana - for wallet operations solana>=0.34.0 solders>=0.21.0 # Utilities
# Solana - for wallet operations solana>=0.34.0 solders>=0.21.0 # Utilities base58>=2.1.0
solders>=0.21.0 # Utilities base58>=2.1.0
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.