SunSwap DEX Trading

Warn

Audited by Snyk on Oct 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates as a DeFi trading and liquidity management tool via sun-cli, executing direct financial operations such as token swaps, liquidity additions/removals, and contract sends that move or trade funds on the TRON blockchain. These direct write operations require wallet credentials (TRON_PRIVATE_KEY, etc.) configured in the environment, but the skill itself documents instructions and flags (--yes) for the agent to bypass interactive prompts without independent service-layer or execution-layer authentication checks enforced on the action route (the CLI relies entirely on the local private key/wallet environment variable provided to it). Therefore, this represents a direct financial operation without qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 25, 2026, 05:53 PM
Issues
1