contracts-mev-sandwich
MEV sandwich attacks — front-run + back-run a victim swap on Uniswap V2/V3, Curve, Balancer; mempool monitoring via Flashbots / private RPC, slippage tolerance exploitation, JIT liquidity sandwich, multi-block MEV.
57
66%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Fix and improve this skill with Tessl
tessl review fix ./packages/decepticon/decepticon/skills/standard/contracts/mev-sandwich/SKILL.mdSecurity
3 findings: 1 critical severity, 1 high severity, 1 medium severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E006: Malicious code pattern detected in skill scripts.
What this means
Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.
Why it was flagged
This document gives explicit, actionable instructions and runnable code to perform MEV sandwich attacks (mempool snooping, front-run/back-run bundles, and JIT liquidity) intended to extract value from unrelated users — a deliberate, predatory abuse pattern.
W007: Insecure credential handling detected in skill instructions.
What this means
The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.
Why it was flagged
The prompt instructs including a victim's signed transaction verbatim in a Flashbots bundle (signedTransaction: rawVictimTx) and references a private key env var for wallet signing, which requires the agent to handle and forward sensitive secret/signed data directly.
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill is explicitly designed to execute profitable on-chain trades: it shows code to detect mempool swaps, construct front-run/back-run swap transactions, create a wallet from a private key, sign a Flashbots bundle, and send the signed bundle to a relay. These are direct crypto transaction signing and broadcasting operations (wallet PK, sendRawBundle, swap transactions), which constitute direct financial execution on blockchain networks.
- Repository
- PurpleAILAB/Decepticon
- Commit
e34afba
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.