payram-agent-onboarding

Warn

Audited by Snyk on Oct 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents deployment and automation for PayRam, an API-driven payment infrastructure for AI agents and CLI environments. It supports direct financial operations including smart contract wallet deployment, fund sweeping/transfers, and setting up blockchain payment rails (ETH, Base, BTC) as well as generating payment links. Although authentication tokens are stored locally, there is no documented independent access control enforced by the service or execution layer for the payment and wallet deployment routes (only API key/password authentication and local secret storage). Therefore, direct financial operations are present without established qualifying independent access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 8, 2026, 07:28 PM
Issues
1