fhenix-confidential-erc20-wrapper
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for on-chain token operations: it defines shield()/shieldNative(payable)/shieldWrappedNative functions to deposit value, unshield() to burn confidential tokens and create claims, and claimUnshielded/claimUnshieldedBatch which verify proofs and transfer underlying tokens (× rate). The examples show approving ERC20, calling wrapper.shield(...), sending native value, and a TS prompt to write a script that calls unshield, reads claims, decrypts, and calls claimUnshielded (or the batch variant). These are explicit crypto asset transfer and payout functions (including a payable native wrapper), so the skill provides direct financial execution capability for blockchain tokens.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata