arkiv-entity-lifecycle
Warn
Audited by Snyk on Oct 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents direct financial/asset operations (transfers, creation, patching, and deletion of blockchain entities involving spending GLM gas or asset manipulation as mentioned in SKILL.md:19 "spending GLM"). However, these operations are performed via connected wallet clients (
createWalletClientfrom Viem/SDK) where authentication is managed by the external wallet/signer layer. The SDK methods (wallet.createEntity,wallet.patchEntity,wallet.changeOwnership,wallet.executeBatch) require a connected wallet instance that provides the private key or session credentials, fulfilling the independent access control requirement (service/execution layer authentication).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata