codevasp-travel-rule-guide

Warn

Audited by Snyk on Mar 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly focused on cryptocurrency VASP operations and provides concrete API endpoints, templates, and code samples for authorizing and reporting asset transfers. The API reference lists functions such as "Asset Transfer Authorization", "Report Transfer Result (TX Hash)", "Finish Transfer", "Transaction Status Search", "Networks by Coin", and "Unhosted Wallet" actions ("Issue Token", "Render Widget", "Get Result"). It also includes implementation samples (nodejs/python/java/go) for authentication, encryption, and API calls. These are specific, actionable crypto/blockchain transfer operations (sending/reporting transactions and handling wallet interactions), which constitute direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 18, 2026, 08:08 AM
Issues
1