poster

Warn

Audited by Snyk on Jun 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly integrates a BlockRun wallet API: it requires the MCP tool mcp__blockrun__blockrun_wallet, calls it with {"action":"status"} to check a USDC balance (required ≥ $0.20), references settling cost on Base USDC via x402, and instructs users to run blockrun_wallet action: setup to top up. These are specific crypto wallet/payment integrations (wallet status/top-up and settlement in USDC), not generic tooling, so it provides direct financial execution capability risk.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 09:21 PM
Issues
1
Security Audit — snyk — poster