launch-bnb-token-on-flap
Warn
Audited by Snyk on Oct 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill constructs and broadcasts EVM transactions on BNB Chain (including native BNB value transfers and initial token purchases via
quoteAmtandmsg.valueas documented in SKILL.md:118-125 and SKILL.md:149-157). This constitutes a direct financial operation (purchases/transfers). However, the execution relies entirely on local agent actions and user-provided signing capability ("the transaction should be signed by the EVM wallet. Always verify transaction details independently before signing" per SKILL.md:17), without an independent service-enforced access control or authentication check gating the payment route itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata