ckb-ccc-signer-setup

Warn

Audited by Snyk on Jul 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly provides wallet and signer integrations and concrete blockchain transaction APIs: creating a private-key signer (SignerCkbPrivateKey), building transactions, completing inputs/fees, and sending transactions via signer.sendTransaction(tx). It also exposes balance queries and message signing. These are specific crypto/financial execution capabilities (directly moves on-chain funds).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 19, 2026, 02:38 PM
Issues
1
Security Audit — snyk — ckb-ccc-signer-setup