zk

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a Solana on-chain program and client for creating "nullifier" accounts (includes program instruction implementations, CPI to the Light system program, and client-side code that builds and sends instructions via RPC using a signer). It shows how to derive addresses, obtain validity proofs, construct remaining accounts, and call program.methods.createNullifier with a signer (Rust Signer<'info> / TypeScript signer.publicKey). The implementation performs on-chain state changes that lock lamports and requires signing/transaction submission via blockchain RPC/SDKs (light-sdk, light-client, stateless.js). This is a specific crypto/blockchain capability (constructing and submitting signed transactions and creating accounts that lock currency), so it grants direct financial execution authority.