alchemy-api
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a specialized integration for blockchain operations (Alchemy). It explicitly documents EVM JSON-RPC "reads and writes" (eth_*), transaction simulation, portfolio and token transfer endpoints, and references a wallet-based "agentic gateway" flow for wallet auth. Those capabilities are specific to crypto/blockchain transaction execution (signing/sending/simulating transactions) rather than a generic API caller, so it grants direct crypto financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata