From 2ff76e756752c3eb504e0e6a475e8c2627e3bf6f Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Sun, 25 Oct 2026 12:46:05 -0700
Subject: [PATCH] chore(catalog): review disclosure for true402-swap-guard

---
 plugin-catalog/true402-swap-guard.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin-catalog/true402-swap-guard.yaml b/plugin-catalog/true402-swap-guard.yaml
index 3b656e9b59..c64c5979f7 100644
--- a/plugin-catalog/true402-swap-guard.yaml
+++ b/plugin-catalog/true402-swap-guard.yaml
@@ -2,7 +2,7 @@ name: true402-swap-guard
 repo: https://github.com/true402/hermes-swap-guard
 sha: 27da03ba948ba2e91c2d33bf96f36ab509e6547a
 subdir: true402_swap_guard_free
-description: "Blocks token buys when true402 finds a honeypot or a rug in progress — one pre_tool_call hook in front of every trading tool, MCP server and terminal command (Base, Ethereum, BSC, Solana). Free edition: it never pays, holds no wallet key and has no payment code. Disclosure — for each token a tool call would buy, the token address and chain are sent to true402.dev's free check endpoint; nothing about prompts, the trade, the wallet or other tools. Uses true402's small daily free allowance; when it is used up, a token counts as unchecked and passes by default (configurable to ask or block). Blocks only on a definite danger verdict for a token being bought; a possible sale goes to the approval gate instead. No stored data, no shell commands, background processes or telemetry."
+description: "Blocks token buys when true402 finds a honeypot or a rug in progress — one pre_tool_call hook in front of every trading tool, MCP server and terminal command (Base, Ethereum, BSC, Solana). Free edition: it never pays, holds no wallet key and has no payment code. Disclosure — the pre_tool_call hook reads the command string of every tool call and the parameters of trading-named tools; when a call looks like a buy, each candidate token address and its chain (every 0x address in a trading shell command except well-known majors and an unambiguous sold token, which can include a recipient or wallet address) is sent to true402.dev's free check endpoint, with no prompts, amounts or other tool data. Uses true402's small daily free allowance; when it is used up, a token counts as unchecked and passes by default (configurable to ask or block). Blocks only on a definite danger verdict for a token being bought; a possible sale or a configured caution goes to the Hermes approval gate, and one \"always\" answer there silences all later guard prompts. No stored data, no shell commands, background processes or telemetry."
 maintainer: true402
 tier: community
 category: tools