pump-solana-dev
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Solana blockchain development SDK that builds on-chain instructions for token operations and a "buy" method (lines 25-34), supports SPL Token and Token-2022 minting/management (lines 56-61), and includes signing hooks/provider and transaction operations (AnchorProvider signTransaction stub at lines 11-16 and transaction simulation at lines 76-79). These are crypto/blockchain capabilities intended for creating and executing financial transactions on-chain (tokens, buys), so it constitutes direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata