alchemy-agentic-gateway

Warn

Audited by Snyk on May 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform per-request payments and integrate payment protocols. It requires wallet-based auth (SIWE/SIWS) and describes paying with USDC (x402, Tempo) or credit-card (Stripe via MPP). It references concrete payment libraries/commands (e.g., @alchemy/x402, @x402/fetch, mppx, npx @alchemy/x402 pay), payment headers (Payment-Signature, Authorization: Payment), and payment flows (extract PAYMENT-REQUIRED / WWW-Authenticate, create payment credential, retry with Payment header). Those are specific, built-in mechanisms to create and send payments (on-chain USDC and card payments), so the tool has direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 7, 2026, 02:22 PM
Issues
1