onekey-wallet
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto wallet controller: it defines wallet actions (auth-login, get-address, balance, deposit/receive, transfer/send, wallet-address-types), supports on-chain transfers for BTC, Solana, EVM/ERC20, requires fee/address-type fields, and includes explicit "confirm ... before sending" flows and "security-audit" before execution. These are specific, dedicated blockchain transaction capabilities (wallet transactions/signing and sending), not generic tooling—therefore it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata