wallet-tracker-mcap

Warn

Audited by Snyk on May 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a crypto trading bot with built-in buy/sell execution. It defines live vs paper modes, buy amounts, budget and risk controls, and contains concrete commands to build and broadcast on-chain transactions (onchainos swap swap, onchainos wallet contract-call with TEE signing and broadcast). It also documents autonomous live-session authorization allowing the agent to execute trades without per-trade confirmation. These are specific crypto transaction APIs and wallet signing flows (i.e., direct financial execution authority).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 29, 2026, 03:03 AM
Issues
1
Security Audit — snyk — wallet-tracker-mcap