capacitr

Warn

Audited by Snyk on Jul 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a paid API that requires the agent to create on-chain payment authorizations and submit them via an X-Payment header. It documents concrete signing primitives and settlement flows (EIP‑2612 + Permit2, ERC‑7710 delegations for MetaMask Smart Accounts, EIP‑3009 TransferWithAuthorization), a canonical payee address, and facilitator settlement on Base (Coinbase / MetaMask). These are specific crypto payment APIs and signing workflows for transferring tokens (including $CAPACITR and USDC), not generic HTTP or browser actions—i.e., the skill's primary function is to move money on-chain.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 5, 2026, 02:12 PM
Issues
1
Security Audit — snyk — capacitr