fee-abstraction
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about constructing and sending Celo blockchain transactions that pay gas in ERC-20 tokens. It contains concrete, actionable code to perform financial operations: walletClient.sendTransaction calls, serialization of CIP-64 transactions, estimating gas in a fee currency, and a server-side sponsored-transaction flow that uses privateKeyToAccount(process.env.SPONSOR_PRIVATE_KEY) to sign/send transactions on-chain. These are crypto/blockchain transaction signing/execution capabilities (moving value), not generic examples, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata