use-smart-contract-platform
Warn
Audited by Snyk on Oct 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates smart contract deployment, transactions, and token transfers using Circle Smart Contract Platform and Developer-Controlled Wallets APIs. These are direct financial operations (transfers, contract execution, token airdrops/distribution). The access controls mentioned (API keys and entity secrets in environment variables) are managed by the agent/client configuration rather than being independently enforced by a service-layer authentication mechanism that validates every transactional instruction independently of the agent's code, or they rely solely on agent-followed rules and confirmation prompts rather than an independent execution-layer gate.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata