creator-paywall
Warn
Audited by Snyk on Jun 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto payments/subscription system: it directs users to "transfer tokens to the creator's wallet", supports native coin and ERC-20 payments, uses viem EVM clients, and exposes endpoints for starting a payment intent and verifying a txHash (/api/subscribe/intent, /api/subscribe/verify, /api/subscribe/check). Its verification logic matches on-chain transactions (sender == logged-in wallet, recipient == creator wallet, token and amount checks). This is a purpose-built tool to accept and verify crypto payments (i.e., move money on-chain), not a generic browser or HTTP utility.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata