nws-current-conditions

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes an on-chain payment flow: the endpoint can return a signed quote (402 Payment Required) that the client must sign with a private key, it instructs setting FITTINGS_PRIVATE_KEY, references a wallet holding USDC on Base, and mentions EVM/npm tooling. Those are explicit crypto/payment signing instructions (wallet/private key usage) which enable direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 05:19 AM
Issues
1