bridge-stablecoin
Warn
Audited by Snyk on May 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to move money: it documents Circle's App Kit and Bridge Kit SDKs for bridging USDC across chains, including direct operations like approve, burn, fetchAttestation, and mint, a single kit.bridge() call, and helpers for adapters that use private keys or Circle Wallets. It requires environment variables for private keys and API/entity secrets, shows transaction hashes and explorer URLs, supports forwarding (server-side/custodial) transfers, and provides retry/resume capabilities for failed transfers. These are specific crypto/blockchain transaction APIs and wallet signing flows intended to execute value transfers, not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata