fittings-geo
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly describes an on-chain/off-chain payment mechanism: it requires "USDC on Base" and a private key set via an environment variable (FITTINGS_PRIVATE_KEY) to sign/authorize USDC transfers; it also explains an off-chain signature authorizing a USDC transfer and that a facilitator submits the transaction and covers gas. Those are concrete instructions and artifacts to perform monetary transfers (signing/sending payments), so this grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata