openfort-cli
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a blockchain wallet/transaction CLI and includes concrete commands and APIs to move funds: e.g., "openfort accounts evm send-transaction" (creates, signs and submits EVM transactions), "openfort accounts solana transfer --to --amount ..." (SOL/USDC/SPL token transfers), the transactions create/sign/submit flow, backend wallets authored by API keys, and sponsorship strategies that pay gas. These are specific crypto wallet and transaction operations (signing and sending on-chain transfers), so the skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata