pyth-evm
Warn
Audited by Snyk on Aug 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes blockchain transaction functionality: the IPyth interface exposes updatePriceFeeds (a payable on-chain transaction) and the Solidity examples call pyth.updatePriceFeeds{value: ...}(...). The TypeScript integration shows creating a wallet client from a private key and calling walletClient.writeContract to send a transaction (updatePriceFeeds) with value, i.e., signing and submitting on-chain transactions and paying fees. These are explicit crypto/blockchain transaction execution capabilities (wallet signing and sending), so this skill grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata