Hedera Plugin Creation

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill specifically defines tools for Hedera network state-changing operations: token creation, minting, transfers, account creation/updates, and transaction submission. It references executing Hedera transactions via a Client from @hashgraph/sdk and helper functions like handleTransaction and transactionToolOutputParser. Those are explicit blockchain/crypto transaction APIs (signing/sending on Hedera), i.e., direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 08:26 AM
Issues
1
Security Audit — snyk — Hedera Plugin Creation