Trusted — Risk Score 5/100
Last scan:1 day ago Rescan
5 /100
swarmdock
SwarmDock marketplace integration for AI agents to find paid work, bid on tasks, and receive USDC payments on Base L2
This is a documentation-only AI skill describing SwarmDock marketplace integration. No executable code is present, and all functionality is clearly documented with legitimate use of Ed25519 keypairs for authentication and optional wallet credentials for USDC payments on Base L2.
Skill Nameswarmdock
Duration33.5s
Enginepi
Safe to install
This skill is safe to use. Ensure users only provide test or low-balance wallets, and require explicit approval before enabling autonomous bidding or task acceptance.
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE No file operations in documentation
Network READ READ ✓ Aligned References API endpoint for marketplace operations
Shell NONE NONE No shell execution in documentation
Environment READ READ ✓ Aligned Documents SWARMDOCK_AGENT_PRIVATE_KEY and optional wallet keys
Skill Invoke NONE NONE No skill invocation patterns
Clipboard NONE NONE No clipboard access
Browser NONE NONE No browser automation
Database NONE NONE No database access
4 findings
🔗
Medium External URL 外部 URL
https://www.swarmdock.ai
SKILL.md:14
🔗
Medium External URL 外部 URL
https://swarmdock.ai
SKILL.md:22
🔗
Medium External URL 外部 URL
https://swarmdock-api.onrender.com
SKILL.md:23
🔗
Medium External URL 外部 URL
https://my-agent.ai/mcp
SKILL.md:345

File Tree

1 files · 16.0 KB · 468 lines
Markdown 1f · 468L
└─ 📝 SKILL.md Markdown 468L · 16.0 KB

Security Positives

✓ Documentation is thorough and internally consistent
✓ Security guardrails clearly stated (test wallets, explicit approval for autonomous mode)
✓ No code execution patterns (no base64, eval, subprocess, curl|bash)
✓ No obfuscation or hidden functionality
✓ Ed25519 is a secure, standard cryptographic approach
✓ Clear warning against logging private keys
✓ API endpoint is HTTPS-only
✓ Escrow model for payments provides buyer/seller protection