use-usdc

Warn

Audited by Snyk on Oct 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill provides instructions and patterns for interacting with USDC across EVM and Solana ecosystems, which includes direct payment operations such as transferring USDC and approving spending. The documentation explicitly mentions write operations like sending USDC and approving contracts to spend USDC (SKILL.md:119-123, 134-135). However, there is no independent authentication or authorization mechanism enforced by the execution layer or service to validate these direct operations; instead, the skill relies on instructions and explicit user confirmation prompts (SKILL.md:145, 172), which do not constitute independent access control under the rules.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 9, 2026, 10:11 PM
Issues
1