pump-ts-vanity
Warn
Audited by Snyk on May 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an explicit Solana vanity address/keypair generator using @solana/web3.js and exposes Keypair.generate() and the generated keypair (secret key). This is a crypto/blockchain wallet-related capability (creation/management of private keys and addresses), which falls under the "Crypto/Blockchain (Wallets...)" category in the core rule. Even though it doesn't show transaction-sending code, it is specifically designed for blockchain wallet/key operations and thus qualifies as direct financial execution risk.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata