frontpage-profile

Warn

Audited by Snyk on Jun 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly performs a paid on-chain/crypto action: claiming/updating a profile via POST /api/profile costs $0.01 USDC "via MPP". The docs show using Mppx/tempo and privateKeyToAccount (signing with a wallet/account) to make the payment. This is a specific crypto/payment integration (wallet signing / micropayment API) intended to move value, not a generic API caller, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 26, 2026, 02:50 AM
Issues
1
Security Audit — snyk — frontpage-profile