didit-transaction-monitoring

Warn

Audited by Snyk on Oct 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill integrates with the Didit Transaction Monitoring and Travel Rule API to screen crypto transactions, wallets, and perform FATF/EU TFR Travel Rule exchanges. Although it orchestrates compliance workflows and tells the user when it is "safe to broadcast on-chain," the actual crypto transfer or payment execution happens externally by broadcasting on-chain or settling outside the skill's direct operational control (as noted by "COMPLETED
  • safe to broadcast on-chain now" and subsequent reporting via PATCH). This constitutes indirect financial operations (submitting/managing transaction compliance and travel rule data for downstream execution). Therefore, the financial exposure is indirect.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 13, 2026, 12:49 AM
Issues
1