SunSwap DEX Trading
Warn
Audited by Snyk on Oct 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates as a DeFi trading and liquidity management tool via
sun-cli, executing direct financial operations such as token swaps, liquidity additions/removals, and contract sends that move or trade funds on the TRON blockchain. These direct write operations require wallet credentials (TRON_PRIVATE_KEY, etc.) configured in the environment, but the skill itself documents instructions and flags (--yes) for the agent to bypass interactive prompts without independent service-layer or execution-layer authentication checks enforced on the action route (the CLI relies entirely on the local private key/wallet environment variable provided to it). Therefore, this represents a direct financial operation without qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata