pancakeswap-clmm-plugin

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill operates as a PancakeSwap V3 CLMM farming plugin that supports direct financial operations (staking/unstaking LP NFTs, harvesting CAKE rewards, and collecting swap fees via smart contract interactions). These write operations submit transactions via onchainos wallet contract-call when confirmed. However, the operations depend on the onchainos CLI and wallet session login (as documented in SKILL.md:253-257 and SKILL.md:311-313), which requires an authenticated session/business or validated service API credentials enforced by the execution layer. This qualifies as independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 08:56 PM
Issues
1