jaw
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The SKILL.md is a blockchain wallet/SDK that explicitly exposes methods to send value and token transfers (sendTransaction, sendCalls, eth_sendTransaction, wallet_sendCalls), batch/atomic transfers, grant spend permissions (spend-permission with allowances), and server-side spender accounts (Account.fromLocalAccount) used to charge users. These are specific, purpose-built financial execution APIs (on-chain payments and permissioned charging), so the skill grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata