xion-faucet
Warn
Audited by Snyk on Mar 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to move cryptocurrency tokens on a blockchain testnet. It provides specific commands to "claim" tokens, returns a tx_hash on success, supports a "delegate" (claim for another address), shows execute messages (e.g., { "faucet": {} } and { "delegate": { "receiver_address": "..." } }), requires authentication/signing, and even references sending tokens (xion-toolkit send). This is a crypto/blockchain transaction tool (directly sends/sponsors tokens), so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata