poster
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly integrates a BlockRun wallet API: it requires the MCP tool mcp__blockrun__blockrun_wallet, calls it with {"action":"status"} to check a USDC balance (required ≥ $0.20), references settling cost on Base USDC via x402, and instructs users to run
blockrun_wallet action: setupto top up. These are specific crypto wallet/payment integrations (wallet status/top-up and settlement in USDC), not generic tooling, so it provides direct financial execution capability risk.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata