injective-trading-bridge
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill executes direct financial token transfers and cross-chain bridging operations using the Injective MCP server (such as
bridge_debridge_send,bridge_debridge_inbound_send, andbridge_withdraw_to_eth). Although a local password parameter is passed to some execution tools, authentication and transaction authorization are handled locally or via MCP client-side prompts rather than by an independent server-enforced authentication/authorization layer on a remote service API. Therefore, this constitutes a direct financial operation without established independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata