deployer
Warn
Audited by Snyk on Oct 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates as a deployment agent for Continuous Clearing Auction (CCA) smart contracts using Foundry (
forge script) andcastcommands. It guides users through broadcasting transactions and spending gas (e.g., lines 70, 93-97, 324-334), approving token transfers (lines 296-299), and calling factory deployment methods (lines 302-309). This constitutes direct financial operations (transfers/smart contract deployment with asset handling). Although private key handling and tool approval warnings are documented (lines 70, 84), these are instructions/warnings rather than independent service- or execution-layer access controls enforced by the platform to validate or restrict payment routes. Therefore, the direct financial operation lacks qualifying independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata