nano
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates a direct cryptocurrency payment and wallet-transfer route (sending Nano via
wallet_send/sendand refunding viapayment_refund), which moves real funds. While spending is bounded by a localmaxSendXnolimit (default 1.0 XNO), there is no documented independent access control (such as server-side authentication, password prompt, or third-party transaction signing authorization enforced by the execution layer) gating the transaction execution itself; the agent directly initiates the transfer tool call.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata