robo-miner-agent

Warn

Audited by Snyk on Jul 22, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly performs on-chain financial actions: minting RES and redeeming RES for ERC-20 WVARA, includes contract/program IDs, requires the owner to sign an EIP-712 redeem intent, calls a backend-mediated redeem flow (Redeem/RedeemFor) that burns RES and transfers WVARA, and uses the vara-wallet for signing transactions. These are specific crypto/token-transfer operations (wallet signing, contract calls, payoutTxHash verification), so the skill grants direct financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 22, 2026, 12:30 PM
Issues
1
Security Audit — snyk — robo-miner-agent