hermetica-yield-rotator

Warn

Audited by Snyk on Oct 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documentation describes a cross-protocol yield rotator that executes capital rotation between protocols (Hermetica and Bitflow) on Stacks mainnet. It explicitly includes capabilities and MCP command generation for financial actions such as staking, unstaking, and swapping/rotating crypto assets ("outputs MCP commands for stake, initiate-unstake, complete-unstake, and cross-protocol rotate actions"). This falls under crypto/blockchain transaction signing/execution, which is classified as Direct Financial Execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 1, 2026, 05:03 AM
Issues
1