bip32

Warn

Audited by Snyk on May 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for HD crypto key derivation and signer creation. It shows code to derive EVM private keys (convert XPrv.private_key() to an alloy PrivateKeySigner) and to derive Solana Keypairs (keypair_from_seed_and_derivation_path). These are specific crypto wallet/signing capabilities (wallet key material and signer objects) that can be used to sign and send blockchain transactions — i.e., directly execute financial transfers. This is not a generic utility; it is explicitly designed for blockchain wallet/key management and signing.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 5, 2026, 04:31 PM
Issues
1