pendle
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The SKILL.md includes explicit on-chain transaction APIs and examples that perform financial actions: contract ABIs for minting/redeeming tokens, swap functions, liquidity provision, claiming yields, and ERC-20 approvals, plus code paths that call walletClient.writeContract / waitForTransactionReceipt. These are specific crypto financial execution operations (mintPyFromToken, swapExactTokenForPt, redeemSyToToken, redeemDueInterestAndRewards, approve, etc.), i.e., the skill is explicitly designed to move funds on-chain.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata