sec-ticker-resolve

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly describes an on-chain/crypto payment flow: the client receives a 402 with a signed quote, the caller must sign an authorization with a private key (FITTINGS_PRIVATE_KEY), and a facilitator settles using USDC on Base. The docs show commands setting a private key and running node call.mjs to pay; it therefore includes an explicit crypto wallet signing/payment mechanism (not mere generic HTTP or browser automation). This is direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 05:20 AM
Issues
1