wallet-cli

Warn

Audited by Snyk on Oct 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates a TRON wallet CLI capable of performing direct financial operations such as transfers, staking, governance, SunSwap swaps/liquidity, and SunPump bonding-curve trading. These direct operations are governed entirely by instructions within the skill (agent-followed warnings, confirmation rules, and dry-run checks) rather than an independent access control mechanism enforced by the service or execution layer (such as authenticated session gating or external wallet approval prompts enforced by the underlying tool independent of agent invocation). Therefore, it constitutes a direct financial operation without established qualifying control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 25, 2026, 05:53 PM
Issues
1