pendle

Warn

Audited by Snyk on Aug 4, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The SKILL.md includes explicit on-chain transaction APIs and examples that perform financial actions: contract ABIs for minting/redeeming tokens, swap functions, liquidity provision, claiming yields, and ERC-20 approvals, plus code paths that call walletClient.writeContract / waitForTransactionReceipt. These are specific crypto financial execution operations (mintPyFromToken, swapExactTokenForPt, redeemSyToToken, redeemDueInterestAndRewards, approve, etc.), i.e., the skill is explicitly designed to move funds on-chain.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 4, 2026, 12:32 AM
Issues
1
Security Audit — snyk — pendle