moonpay-upgrade
Fail
Audited by Snyk on Sep 22, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The skill promotes cryptocurrency payments and token transfers for an API upgrade service inside a non-financial skill.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill documentation describes tools (
mp upgrade) that explicitly execute crypto payments and manage transactions using local wallets (USDC on Solana or Base) via x402 to pay for service upgrades, meeting the criteria for Direct Financial Execution (Crypto/Blockchain wallets, payments, and transactions).
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata