swap-tokens

swap-tokens is a Smart contracts & Web3 skill for AI agents, published by circlefin in the skills repository on GitHub. Skillspace rates swap-tokens F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

Build token swap functionality with Circle App Kit or standalone Swap Kit SDKs. App Kit (@circle-fin/app-kit) is an all-inclusive SDK covering swap, bridge, and send. Swap Kit (@circle-fin/swap-kit) is standalone for swap-only use cases. Both require a kit key and run server-side only. Swap runs on mainnet chains and on Arc Testnet. Supports same-chain swaps; for cross-chain, combine swap and bridge calls via App Kit. Use when: swapping tokens, exchanging stablecoins, converting USDT to USDC, setting up swap adapters, estimating swap rates, configuring slippage or stop limits, collecting custom swap fees, or combining swap and bridge for cross-chain token movement. Triggers: swap tokens, USDT to USDC, @circle-fin/swap-kit, @circle-fin/app-kit, estimateSwap, slippage, stop limit, kit key.

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
131

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubcirclefin/skills

Our review

Architecture
100 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
Apache-2.0
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • references sensitive credential env
  • reads environment variables
  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Smart contracts & Web3

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.