injective-faucet
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill operates an INJ cryptocurrency faucet that transfers native tokens (INJ) via an EVM-compatible RPC to initialize and fund user wallets, constituting a direct financial operation (transfers/funding). The faucet script accesses a hot wallet via a private key (
FAUCET_PRIVATE_Key) without any independent access validation or authorization check enforced by the service or execution layer on the route itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata