alchemy-agentic-gateway
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform per-request payments and integrate payment protocols. It requires wallet-based auth (SIWE/SIWS) and describes paying with USDC (x402, Tempo) or credit-card (Stripe via MPP). It references concrete payment libraries/commands (e.g., @alchemy/x402, @x402/fetch, mppx, npx @alchemy/x402 pay), payment headers (Payment-Signature, Authorization: Payment), and payment flows (extract PAYMENT-REQUIRED / WWW-Authenticate, create payment credential, retry with Payment header). Those are specific, built-in mechanisms to create and send payments (on-chain USDC and card payments), so the tool has direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata