aeon-distribute-tokens
Warn
Audited by Snyk on Jul 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain token transfers: it requires a BANKR_API_KEY with Wallet API read-write scope, performs a preflight portfolio balance check, resolves recipients to EVM addresses, and—during EXECUTE—calls the POST /wallet/transfer endpoint for each payout. The documentation even includes a concrete curl example for POST /wallet/transfer, token addresses, handling of tx hashes, and retry/abort logic. These are specific payment/crypto transfer capabilities (not generic tools), so this grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata