solidity-checklist
Warn
Audited by Snyk on Apr 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for on-chain transaction execution. It auto-invokes "BEFORE any on-chain operation (cast send, forge script --broadcast)" and contains concrete commands to send transactions and deploy contracts (e.g.,
cast send ... --account <KEYSTORE_NAME>,forge script ... --broadcast --account <KEYSTORE_NAME>). It also includes explicit guidance on private-key/keystore usage and post-execution verification of balances and receipts. These are specific, blockchain transaction execution capabilities (sending funds/deploying contracts), not generic tooling, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata