codevasp-travel-rule-guide
Warn
Audited by Snyk on Mar 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly focused on cryptocurrency VASP operations and provides concrete API endpoints, templates, and code samples for authorizing and reporting asset transfers. The API reference lists functions such as "Asset Transfer Authorization", "Report Transfer Result (TX Hash)", "Finish Transfer", "Transaction Status Search", "Networks by Coin", and "Unhosted Wallet" actions ("Issue Token", "Render Widget", "Get Result"). It also includes implementation samples (nodejs/python/java/go) for authentication, encryption, and API calls. These are specific, actionable crypto/blockchain transfer operations (sending/reporting transactions and handling wallet interactions), which constitute direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata