pancakeswap-clmm-plugin
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill operates as a PancakeSwap V3 CLMM farming plugin that supports direct financial operations (staking/unstaking LP NFTs, harvesting CAKE rewards, and collecting swap fees via smart contract interactions). These write operations submit transactions via
onchainos wallet contract-callwhen confirmed. However, the operations depend on theonchainosCLI and wallet session login (as documented inSKILL.md:253-257andSKILL.md:311-313), which requires an authenticated session/business or validated service API credentials enforced by the execution layer. This qualifies as independent access control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata