use-circle-cli
Warn
Audited by Snyk on May 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built for on-chain stablecoin operations and agent-directed payments. It surfaces Circle CLI commands that perform money-moving actions:
circle wallet transfer(send USDC),circle services pay(make paid HTTP requests with automatic USDC payment),circle bridge transfer(cross-chain USDC bridging),circle wallet fund/gateway deposit/withdraw(funding and moving balances),circle wallet execute(state-changing contract writes), and transaction management (cancel/accelerate). It also includes commands to set spending policy and manage agent wallets. These are specific, purpose-built financial operations (sending funds, paying for services, bridging, executing on-chain transactions), not generic tooling — so this grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata