walrus-ts-sdk

Warn

Audited by Snyk on Oct 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill documents the Walrus TypeScript SDK (@mysten/walrus) which constructs and signs transactions on the Sui blockchain to store blobs and pay storage costs and tips (e.g. SKILL.md:84-95, SKILL.md:103-111). This constitutes a direct financial operation (blockchain transactions/payments). However, qualifying independent access control is established because write operations require a user-provided Sui keypair or wallet adapter to sign transactions (SKILL.md:52-53, SKILL.md:83, SKILL.md:161), functioning as a cryptographic signature verification mechanism at the execution/service layer.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 14, 2026, 07:15 AM
Issues
1