wallet-tracker-mcap
Warn
Audited by Snyk on May 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto trading bot with built-in buy/sell execution. It defines live vs paper modes, buy amounts, budget and risk controls, and contains concrete commands to build and broadcast on-chain transactions (onchainos swap swap, onchainos wallet contract-call with TEE signing and broadcast). It also documents autonomous live-session authorization allowing the agent to execute trades without per-trade confirmation. These are specific crypto transaction APIs and wallet signing flows (i.e., direct financial execution authority).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata