compose

Warn

Audited by Snyk on Oct 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents configuring and operating Goldsky Compose applications that write transactions and deploy contracts onchain via smart wallets or BYO EOA wallets (e.g., wallet.writeContract, deployContract). These operations constitute direct financial actions (transfers/settlement/execution on EVM chains). However, the skill does not enforce qualifying independent access control; security relies on user confirmation prompts and credentials supplied to the CLI, without an independent execution-layer access check gating the payment route.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 17, 2026, 11:14 PM
Issues
1