moonpay-upgrade

Fail

Audited by Snyk on Sep 22, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill promotes cryptocurrency payments and token transfers for an API upgrade service inside a non-financial skill.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill documentation describes tools (mp upgrade) that explicitly execute crypto payments and manage transactions using local wallets (USDC on Solana or Base) via x402 to pay for service upgrades, meeting the criteria for Direct Financial Execution (Crypto/Blockchain wallets, payments, and transactions).

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 22, 2026, 05:09 PM
Issues
2