haima
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform real financial operations. It implements on-chain wallets (secp256k1 keys, Ethereum-compatible addresses), a signing interface (sign_message, sign_typed_data, sign_transfer_authorization), an x402 payment protocol that signs and submits payment authorizations and settles on-chain (USDC on Base), and API endpoints (/balance, /transactions). It also references facilitators/payment processors (Coinbase CDP, Stripe) and records settled on-chain payments and balance sync events. These are specific crypto/payment integrations intended to move money, not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata