codevasp-travel-rule-guide
Warn
Audited by Snyk on Nov 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external documentation from docs.codevasp.com and GitHub during the integration workflow.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides expert guidance and code examples for integrating the CodeVASP Travel Rule API, including building deposit/withdrawal modules, generating IVMS101 payloads, and handling asset transfer authorizations. This constitutes indirect financial operations (submitting billable/transfer compliance data and integration instructions for downstream payment and transfer flows).
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata