hermetica-yield-rotator
Warn
Audited by Snyk on Oct 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation describes a cross-protocol yield rotator that executes capital rotation between protocols (Hermetica and Bitflow) on Stacks mainnet. It explicitly includes capabilities and MCP command generation for financial actions such as staking, unstaking, and swapping/rotating crypto assets ("outputs MCP commands for stake, initiate-unstake, complete-unstake, and cross-protocol rotate actions"). This falls under crypto/blockchain transaction signing/execution, which is classified as Direct Financial Execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata