Hedera Agent Kit v4 Migration
Warn
Audited by Snyk on Jun 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about migrating code that constructs and executes Hedera blockchain transactions. It references @hiero-ledger/sdk (the Hedera SDK), plugin names like coreTokenPlugin/coreAccountPlugin, an example transfer_hbar tool, and instructs authors to "build the Transaction for mutations" and "call handleTransaction(...) for mutations." These are specific crypto/blockchain transaction APIs and patterns (signing/sending transfers), not generic tooling, so the skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata