swapper-integration
Guides integration of DEX aggregators and swappers into ShapeShift Web, covering research, implementation, and testing processes.
Install this skill
or
71/100
Security score
The swapper-integration skill was audited on Feb 28, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 40
Access to .env file
SourceSKILL.md
| 40 | - **If API key needed**: Obtain production API key to add to `.env.base` |
medium line 452
Access to .env file
SourceSKILL.md
| 452 | **`.env`** (base/production - both API key and feature flag OFF): |
medium line 459
Access to .env file
SourceSKILL.md
| 459 | **`.env.development`** (development - feature flag ON): |
medium line 467
Access to .env file
SourceSKILL.md
| 467 | - API key: `VITE_[SWAPPER]_API_KEY` (in both `.env` and `.env.development`) |
medium line 468
Access to .env file
SourceSKILL.md
| 468 | - Feature flag: `VITE_FEATURE_[SWAPPER]_SWAP` (`.env` = false, `.env.development` = true) |
low line 474
Access to .env file
SourceSKILL.md
| 474 | VITE_[SWAPPER]_API_KEY: import.meta.env.VITE_[SWAPPER]_API_KEY || '', |
low line 475
Access to .env file
SourceSKILL.md
| 475 | VITE_[SWAPPER]_BASE_URL: import.meta.env.VITE_[SWAPPER]_BASE_URL || '', |
low line 476
Access to .env file
SourceSKILL.md
| 476 | VITE_FEATURE_[SWAPPER]_SWAP: parseBoolean(import.meta.env.VITE_FEATURE_[SWAPPER]_SWAP), |
low line 371
External URL reference
SourceSKILL.md
| 371 | 'connect-src': ['https://api.[swapper].com'], |
Scanned on Feb 28, 2026
View Security Dashboard