aeon-distribute-tokens
Warn
Audited by Snyk on Sep 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (medium risk: 0.30). The skill contains setup and install instructions referencing a remote GitHub repository (
https://github.com/BankrBot/skills/tree/main/aeon-distribute-tokens) which acts as an operational dependency for installing the skill material, evaluated as a common/reputable unofficial source.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill contains explicit instructions, API endpoints (
POST /wallet/transfer), and configuration requirements (BANKR_API_KEYwith write scope) specifically designed to execute financial transactions and token payouts via a crypto wallet API.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata