quicknode-skill

Warn

Audited by Snyk on Sep 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The provided skill documentation includes explicit capabilities and tools for direct financial execution and asset movement. Specifically, it documents the Swap API for multi-DEX aggregated token swaps (such as Jupiter on Solana and 0x/OpenOcean on EVM) allowing programmatic generation and signing of transactions to exchange tokens (Lines 524-557), as well as crypto/stablecoin payment/micropayment mechanisms via x402 and MPP (such as buying credits and executing paid RPC requests using private keys, Lines 561-630, 823-840, 905-929) and agent subscriptions using real stablecoins (Lines 632-754).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 16, 2026, 07:22 AM
Issues
1