quasar
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for building Solana programs and includes direct on-chain payment primitives. It references SPL token CPI, system_program.transfer (including invoke and invoke_signed for PDA signing), direct lamport manipulation via set_lamports, and escrow/deposit patterns — all concrete APIs and patterns for moving funds and managing crypto assets on-chain. These are specific crypto/blockchain execution capabilities, not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata