tooluniverse-protein-structure-prediction

Warn

Audited by Snyk on Oct 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill describes an optional workflow for the Boltz API that involves paid structure-binding predictions requiring a BOLTZ_API_KEY, estimating cost, and starting paid jobs (SKILL.md:198-204, 358). This constitutes a direct financial operation (purchasing/submitting paid API tasks). However, the instructions mandate explicit user confirmation and cost estimation before any job submission (SKILL.md:202-203), and require a caller-supplied idempotency key (SKILL.md:203). Because the execution relies on explicit user confirmation and API keys rather than being fully autonomous or unauthenticated, it falls under medium severity with external approval/validation.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 11, 2026, 05:27 PM
Issues
1