jb-terminal-selection

Warn

Audited by Snyk on Jun 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute on-chain payments: it instructs signing permit2 approvals with the terminal as spender, selecting a JBSwapTerminal or JBMultiTerminal, and calling walletClient.writeContract(...) to invoke the 'pay' function on those terminals (including token swaps and transfers). These are direct crypto/blockchain financial operations (wallet approvals, contract pay calls, and token swapping), not generic tooling. Therefore it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 16, 2026, 01:03 AM
Issues
1
Security Audit — snyk — jb-terminal-selection