Security audit

jarvis-smart-route

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clearly scoped swap route helper that sends user-approved quote details to Jarvis and returns unsigned transaction data for separate wallet approval.

Install only if you are comfortable sharing wallet address and intended swap details with the Jarvis routing service for quotes. Review any returned transaction in your wallet before approving, especially recipient, token amounts, fees, and slippage.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The script transmits the user's wallet address, token pair, amount, and optional slippage to a third-party public routing endpoint without any explicit user-facing disclosure or consent prompt in the tool itself. In a trading context, this metadata can reveal portfolio interests and trading intent, enabling profiling, surveillance, or commercial misuse even though no private key or signing action occurs.

Static analysis

No suspicious patterns detected.