quicknode-skill
Warn
Audited by Snyk on Sep 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The provided skill documentation includes explicit capabilities and tools for direct financial execution and asset movement. Specifically, it documents the Swap API for multi-DEX aggregated token swaps (such as Jupiter on Solana and 0x/OpenOcean on EVM) allowing programmatic generation and signing of transactions to exchange tokens (Lines 524-557), as well as crypto/stablecoin payment/micropayment mechanisms via x402 and MPP (such as buying credits and executing paid RPC requests using private keys, Lines 561-630, 823-840, 905-929) and agent subscriptions using real stablecoins (Lines 632-754).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata