compact
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a domain-specific smart-contract language for on-chain assets and includes explicit crypto/blockchain operations: witness callbacks for secret keys and wallet addresses, functions to compute public keys, commitment/nullifier patterns, Merkle/HistoricMerkle trees for token membership, and concrete NFT examples with mint() and transfer() circuits that update on-chain ledger state (totalSupply, tokenCommitments). These are specific primitives for managing and moving on-chain value (tokens/NFTs) rather than generic tooling, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata