context-optimizer
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill includes explicit payment integration and wallet-based transaction endpoints. It references pricing in USDT, uses an "agent_wallet" (0x...) field, and exposes x402 payment endpoints (POST /api/x402/subscribe, POST /api/x402/verify, GET /api/x402/license/:wallet). Those are specific crypto/payment APIs designed to initiate/verify subscriptions and link wallets. Even though the doc says user authorization is required and the skill won’t store private keys, the presence of dedicated payment/wallet endpoints and subscription functionality qualifies as direct financial execution capability.
Audit Metadata