zama-private-soulbound-token

Warn

Audited by Snyk on Jun 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill contains explicit blockchain smart-contract code (a Solidity contract implementing a "soulbound token") and deployment instructions using Hardhat to a public testnet (Sepolia). That makes it a specific crypto/blockchain capability: it enables deploying and executing on-chain transactions (state changes, contract calls) rather than being a purely generic tool. Even though it does not show an external payment gateway or wallet code directly, the Hardhat deployment and on-chain contract invocation are concrete blockchain execution pathways and therefore meet the "Crypto/Blockchain" criterion.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 21, 2026, 02:09 AM
Issues
1
Security Audit — snyk — zama-private-soulbound-token