USDD / JUST Protocol

Warn

Audited by Snyk on Nov 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill implements direct token swaps (buys and sells) via the Peg Stability Module (UsddPsm) using a private key (TRON_PRIVATE_KEY), constituting a direct financial operation (crypto asset trading/swapping). Although private keys are required for signing transactions, there is no service-level or execution-layer independent authentication or access control mechanism described for the script execution; security is maintained solely via client-side private key possession and instructions (e.g., environment variables and dry-runs), making it a direct operation without established qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 10, 2026, 05:28 AM
Issues
1