robo-miner-agent
Warn
Audited by Snyk on Jul 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly performs on-chain financial actions: minting RES and redeeming RES for ERC-20 WVARA, includes contract/program IDs, requires the owner to sign an EIP-712 redeem intent, calls a backend-mediated redeem flow (Redeem/RedeemFor) that burns RES and transfers WVARA, and uses the vara-wallet for signing transactions. These are specific crypto/token-transfer operations (wallet signing, contract calls, payoutTxHash verification), so the skill grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata