fittings-civic
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly requires a wallet private key (FITTINGS_PRIVATE_KEY) and describes paying for calls via USDC on Base using an off-chain signature that authorizes a USDC transfer and a facilitator that submits the transaction. This is a specific crypto payment flow (wallet private key and transaction signing) intended to move funds, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata