compose
Warn
Audited by Snyk on Oct 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents configuring and operating Goldsky Compose applications that write transactions and deploy contracts onchain via smart wallets or BYO EOA wallets (e.g., wallet.writeContract, deployContract). These operations constitute direct financial actions (transfers/settlement/execution on EVM chains). However, the skill does not enforce qualifying independent access control; security relies on user confirmation prompts and credentials supplied to the CLI, without an independent execution-layer access check gating the payment route.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata