frontpage-million
Warn
Audited by Snyk on Jun 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly performs monetary transactions: it provides a paid flow (POST /api/million/buy) that charges the quoted total in USDC, requires an email for receipt/validation, and uses MPP (the payment protocol/SDK) to sign and submit the USDC transfer (including automatic handling of the 402 challenge). The API is specifically designed to move money to buy pixels, settle charges, and process refunds — i.e., it directly executes payments.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata