use-smart-contract-platform

Warn

Audited by Snyk on Oct 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill operates smart contract deployment, transactions, and token transfers using Circle Smart Contract Platform and Developer-Controlled Wallets APIs. These are direct financial operations (transfers, contract execution, token airdrops/distribution). The access controls mentioned (API keys and entity secrets in environment variables) are managed by the agent/client configuration rather than being independently enforced by a service-layer authentication mechanism that validates every transactional instruction independently of the agent's code, or they rely solely on agent-followed rules and confirmation prompts rather than an independent execution-layer gate.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 25, 2026, 11:44 PM
Issues
1