dapp-common-skill
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain financial actions. It defines transfer-oriented UI and APIs (TransferForm, useTransfer, transfer.md), a ChainAdapter.transfer(to, amount) method that returns a tx hash, and per-chain adapters with concrete send operations (e.g., EVM transfers, Solana SystemProgram.transfer, UniSat API sendBitcoin, ton_sendTransaction). Examples explicitly instruct building DApps to send ETH, SOL, BTC and to handle token approvals, gas estimation, signing and broadcasting transactions. These are direct crypto/financial execution capabilities, not generic utilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata