pmfi-parbitrage
Warn
Audited by Snyk on Jul 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly provides commands and behavior to submit on-chain token deposits and withdrawals: it names the chain and chainId (Base mainnet), hard-coded vault contract and USDC addresses, requires token approval, runs deposit/withdraw scripts with a --confirm-risk flag, executes transactions from the authenticated Bankr EVM wallet, and returns Basescan transaction links. This is a specific crypto/blockchain financial execution capability (signing/sending token-transfer/vault transactions), not a generic tool. Therefore it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata