ckb-ccc-spore
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill explicitly includes blockchain transaction operations and signer-based transaction submission: it assumes a connected Signer and shows calls like ccc.spore.createSporeCluster / ccc.spore.createSpore, ccc.spore.transferSpore, ccc.spore.meltSpore, and signer.sendTransaction / completeFeeBy. Those are direct on-chain asset creation, transfer, and destruction operations (i.e., crypto/blockchain transaction execution), which constitute Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata