defi-swap
Facilitates DEX token swaps by providing quotes and execution data across multiple chains using various aggregator APIs.
Install this skill
or
53/100
Security score
The defi-swap skill was audited on May 29, 2026 and we found 23 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 26
Curl to non-GitHub URL
SourceSKILL.md
| 26 | exec command="curl -s -X POST 'https://api.paraswap.io/transactions/1' -H 'Content-Type: application/json' -d '{\"srcToken\":\"0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE\",\"destToken\":\"0xA0b86991c6 |
medium line 50
Curl to non-GitHub URL
SourceSKILL.md
| 50 | exec command="curl -s -X POST 'https://quote-api.jup.ag/v6/swap' -H 'Content-Type: application/json' -d '{\"quoteResponse\":QUOTE_FROM_ABOVE,\"userPublicKey\":\"USER_PUBKEY\",\"wrapAndUnwrapSol\":true |
medium line 66
Curl to non-GitHub URL
SourceSKILL.md
| 66 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/check_approval' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"walletAddress\":\"0xUSER\",\"token\":\"0 |
medium line 71
Curl to non-GitHub URL
SourceSKILL.md
| 71 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/quote' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"type\":\"EXACT_INPUT\",\"amount\":\"1000000000000 |
medium line 76
Curl to non-GitHub URL
SourceSKILL.md
| 76 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/swap' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"quote\":QUOTE_FROM_ABOVE,\"signature\":\"0xSIGNED_ |
medium line 81
Curl to non-GitHub URL
SourceSKILL.md
| 81 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/order' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"quote\":QUOTE_FROM_ABOVE,\"signature\":\"0xSIGNED |
low line 17
External URL reference
SourceSKILL.md
| 17 | Base: `https://api.paraswap.io` |
low line 21
External URL reference
SourceSKILL.md
| 21 | web_fetch url="https://api.paraswap.io/prices?srcToken=0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE&destToken=0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48&amount=1000000000000000000&srcDecimals=18&destDec |
low line 26
External URL reference
SourceSKILL.md
| 26 | exec command="curl -s -X POST 'https://api.paraswap.io/transactions/1' -H 'Content-Type: application/json' -d '{\"srcToken\":\"0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE\",\"destToken\":\"0xA0b86991c6 |
low line 41
External URL reference
SourceSKILL.md
| 41 | Base: `https://quote-api.jup.ag/v6` |
low line 45
External URL reference
SourceSKILL.md
| 45 | web_fetch url="https://quote-api.jup.ag/v6/quote?inputMint=So11111111111111111111111111111111111111112&outputMint=EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v&amount=1000000000&slippageBps=50" |
low line 50
External URL reference
SourceSKILL.md
| 50 | exec command="curl -s -X POST 'https://quote-api.jup.ag/v6/swap' -H 'Content-Type: application/json' -d '{\"quoteResponse\":QUOTE_FROM_ABOVE,\"userPublicKey\":\"USER_PUBKEY\",\"wrapAndUnwrapSol\":true |
low line 55
External URL reference
SourceSKILL.md
| 55 | web_fetch url="https://token.jup.ag/strict" |
low line 60
External URL reference
SourceSKILL.md
| 60 | Base: `https://trade-api.gateway.uniswap.org/v1` |
low line 62
External URL reference
SourceSKILL.md
| 62 | > Requires header `x-api-key: YOUR_API_KEY` — get one at https://developers.uniswap.org/dashboard/ |
low line 66
External URL reference
SourceSKILL.md
| 66 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/check_approval' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"walletAddress\":\"0xUSER\",\"token\":\"0 |
low line 71
External URL reference
SourceSKILL.md
| 71 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/quote' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"type\":\"EXACT_INPUT\",\"amount\":\"1000000000000 |
low line 76
External URL reference
SourceSKILL.md
| 76 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/swap' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"quote\":QUOTE_FROM_ABOVE,\"signature\":\"0xSIGNED_ |
low line 81
External URL reference
SourceSKILL.md
| 81 | exec command="curl -s -X POST 'https://trade-api.gateway.uniswap.org/v1/order' -H 'Content-Type: application/json' -H 'x-api-key: YOUR_API_KEY' -d '{\"quote\":QUOTE_FROM_ABOVE,\"signature\":\"0xSIGNED |
low line 86
External URL reference
SourceSKILL.md
| 86 | web_fetch url="https://trade-api.gateway.uniswap.org/v1/swaps?txHash=0xTX_HASH" headers="x-api-key: YOUR_API_KEY" |
low line 106
External URL reference
SourceSKILL.md
| 106 | Base: `https://api.1inch.dev/swap/v6.0/{chainId}` |
low line 110
External URL reference
SourceSKILL.md
| 110 | web_fetch url="https://api.1inch.dev/swap/v6.0/1/quote?src=0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE&dst=0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48&amount=1000000000000000000" |
low line 118
External URL reference
SourceSKILL.md
| 118 | web_fetch url="https://api.0x.org/swap/v1/quote?buyToken=USDC&sellToken=ETH&sellAmount=1000000000000000000" |
Scanned on May 29, 2026
View Security Dashboard