hazard-active-events

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes payment flow and wallet-based settlement: the endpoint returns a signed quote (402), the client must sign an authorization, and a facilitator settles the payment. The doc shows commands that run a client which uses a private key (FITTINGS_PRIVATE_KEY) and USDC on Base to actually pay, and describes caps (FITTINGS_MAX_PRICE) and advice to use a throwaway wallet. These are specific crypto payment/settlement instructions (wallet signing), so this grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 05:18 AM
Issues
1