arkiv-entity-lifecycle

Warn

Audited by Snyk on Oct 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents direct financial/asset operations (transfers, creation, patching, and deletion of blockchain entities involving spending GLM gas or asset manipulation as mentioned in SKILL.md:19 "spending GLM"). However, these operations are performed via connected wallet clients (createWalletClient from Viem/SDK) where authentication is managed by the external wallet/signer layer. The SDK methods (wallet.createEntity, wallet.patchEntity, wallet.changeOwnership, wallet.executeBatch) require a connected wallet instance that provides the private key or session credentials, fulfilling the independent access control requirement (service/execution layer authentication).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 15, 2026, 07:19 PM
Issues
1