fund-agent-wallet

Warn

Audited by Snyk on Oct 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill's documented operation involves funding a Circle agent wallet with USDC via the circle CLI, supporting fiat on-ramps, crypto transfers, and Gateway deposits/withdrawals (circle wallet fund, circle gateway deposit, circle gateway withdraw, circle wallet transfer, circle bridge transfer). These actions move, charge, or request funds or financial assets, constituting a direct financial operation. However, the operations require an authenticated Circle session and valid service API credentials (circle wallet status, login, terms acceptance), and interacting with the wallet/Gateway requires executing authenticated CLI commands against the Circle service infrastructure. This establishes independent service-layer authentication and authorization control for the direct financial operations.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 26, 2026, 01:59 AM
Issues
1