USDD / JUST Protocol
Warn
Audited by Snyk on Nov 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill implements direct token swaps (buys and sells) via the Peg Stability Module (UsddPsm) using a private key (
TRON_PRIVATE_KEY), constituting a direct financial operation (crypto asset trading/swapping). Although private keys are required for signing transactions, there is no service-level or execution-layer independent authentication or access control mechanism described for the script execution; security is maintained solely via client-side private key possession and instructions (e.g., environment variables and dry-runs), making it a direct operation without established qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata