codevasp-travel-rule-guide

Warn

Audited by Snyk on Nov 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external documentation from docs.codevasp.com and GitHub during the integration workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill provides expert guidance and code examples for integrating the CodeVASP Travel Rule API, including building deposit/withdrawal modules, generating IVMS101 payloads, and handling asset transfer authorizations. This constitutes indirect financial operations (submitting billable/transfer compliance data and integration instructions for downstream payment and transfer flows).

Issues (2)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 10, 2026, 10:49 AM
Issues
2