bip32
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for HD crypto key derivation and signer creation. It shows code to derive EVM private keys (convert XPrv.private_key() to an alloy PrivateKeySigner) and to derive Solana Keypairs (keypair_from_seed_and_derivation_path). These are specific crypto wallet/signing capabilities (wallet key material and signer objects) that can be used to sign and send blockchain transactions — i.e., directly execute financial transfers. This is not a generic utility; it is explicitly designed for blockchain wallet/key management and signing.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata