Versioned security assessment

Report ID: SA-3F6E026A

7/19/2026, 10:53:00 AM

lifi-stablecoin-swap security assessment v2

Skill Security Certification Report

Audit History
Scanner version 3.0.0 Audit model: codex Latest published report
Skill name
lifi-stablecoin-swap
Version
v2
Maintainer
internet-court
Source
github.com/internet-court/internet-court-skill/tree/main/vendored/lifi/lifi-stablecoin-swap
Coverage
2 Files scanned · 526 Lines analyzed
Policy version
skillstore-security-audit-policy-v1

Highest confirmed finding severity

High

4 confirmed security findings require attention.

Installation context

Check the current Skill page

This page summarizes report evidence only. The Skill page provides the canonical install advisory.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Most command, filesystem, and reconnaissance detections are false positives caused by Markdown and TypeScript syntax. The quickstart exposes an integrator credential and performs wallet writes without validating the connected chain. It also hides transaction costs and uses unpinned package installation commands.

Report position

Latest published report

Latest refers to the report sequence, not to artifact currentness.

Audit attestation

Attestation unavailable

No public attestation is available for this report.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

2 Files scanned · 526 Lines analyzed

12 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Commit and path bound

  2. Artifact

    Content and tree hashes bound

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 13 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Observed in 2 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 50 evidence locations

Capability review items (8)
High
references/quickstart.md:122
Environment variable access (dot notation)
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
The client quickstart reads NEXT_PUBLIC_LIFI_INTEGRATOR_KEY, which is embedded in the browser bundle. This exposes the integrator credential to every application user.
High
references/quickstart.md:122
Environment variable object
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
The client quickstart reads NEXT_PUBLIC_LIFI_INTEGRATOR_KEY, which is embedded in the browser bundle. This exposes the integrator credential to every application user.
Low
references/quickstart.md:184
Fetch API call
const res = await fetch(
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
references/quickstart.md:185
Hardcoded URL
`https://order.li.fi/orders/status?onChainOrderId=${orderId}`,
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
SKILL.md:156
Fetch API call
const status = await fetch(
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
SKILL.md:153
Hardcoded URL
Poll `GET https://order.li.fi/orders/status?onChainOrderId=<orderId>`:
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
SKILL.md:157
Hardcoded URL
`https://order.li.fi/orders/status?onChainOrderId=${orderId}`,
This code or instruction contacts the external order.li.fi status service with an order identifier. The request is expected functionality, but it is real network access.
Low
SKILL.md:201
Hardcoded URL
**Quote** — `POST https://order.li.fi/quote/request` (under your integrator key):
This instruction sends quote requests to the external order.li.fi service under an integrator identity. The request is expected functionality, but it is real network access.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (4)

RISK-001 High
references/quickstart.md:122
Environment file access
const KEY = process.env.NEXT_PUBLIC_LIFI_INTEGRATOR_KEY!;
NEXT_PUBLIC_LIFI_INTEGRATOR_KEY is consumed by client-side code, making the integrator credential visible in the browser bundle. That exposure can enable unauthorized use of the integrator account.
RISK-002 High
references/quickstart.md:170-178references/quickstart.md:203-228
Connected Chain Is Not Validated Before Wallet Writes
The Base allowance check is followed by wallet writes using wallet.chain without asserting Base. A different connected chain can target unintended same-address contracts.
The code fixes the read client and token constants to Base but passes the current wallet chain into both transaction writes. No chain assertion or switch appears before approval or order opening.
RISK-003 High
SKILL.md:139-146SKILL.md:174-180
Financial Costs and Settlement Mechanics Are Hidden
The guidance says to keep gas, spreads, and solver mechanics off screen and show no fee field. The same flow requires approval and escrow transactions.
The concealment instruction is explicit, while the documented flow includes signed on-chain transactions that can incur source-chain gas and settlement risk.
RISK-004 Medium
references/quickstart.md:11-15
Quickstart Installs Unpinned Packages
The quickstart runs create-next-app at the latest version and installs dependencies without exact versions. Future package changes can alter generated behavior or introduce supply-chain risk.
The commands explicitly use the latest scaffold and omit dependency versions. Reproducing the guide later can therefore resolve different code.

Remediation

Suggested fixes recorded by this audit. Applying them is the maintainer’s responsibility.

  1. FIX-001
    High
    The quickstart exposes the integrator credential through a NEXT_PUBLIC variable.
    Keep the credential in a server-only environment variable, proxy authenticated quote requests, and rotate any credential previously exposed to browsers.
  2. FIX-002
    High
    Wallet approval and escrow writes do not verify the connected chain.
    Require the wallet chain to match the source token chain, switch explicitly when needed, and verify contract addresses before every signature.
  3. FIX-003
    High
    The interface guidance suppresses gas, fee, and solver information.
    Show source-chain gas, approval requirements, quote expiry, settlement states, and refund conditions before the user signs a transaction.
  4. FIX-004
    Medium
    The quickstart resolves the latest scaffold and unpinned dependency versions.
    Pin reviewed package versions, commit a lockfile, and document an update process that includes dependency and contract review.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
3f6e026a3363e0954ede7bef0cfe88d4475de137
Content hash
25d340c22329fddc39da2578ba0bd5d58929a3e8340c5c16b13e3a0d4b606bdb
Tree hash
59596a6f998fbcd62bb0834487cf4fdc445da8247713384124cd0383495921f2
Skill path
skills/internet-court/lifi-stablecoin-swap
Audit payload hash
d94764746c9a35a9f49ece9efd95af9d

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest Source

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: unavailable