creator-paywall

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a crypto payments/subscription system: it directs users to "transfer tokens to the creator's wallet", supports native coin and ERC-20 payments, uses viem EVM clients, and exposes endpoints for starting a payment intent and verifying a txHash (/api/subscribe/intent, /api/subscribe/verify, /api/subscribe/check). Its verification logic matches on-chain transactions (sender == logged-in wallet, recipient == creator wallet, token and amount checks). This is a purpose-built tool to accept and verify crypto payments (i.e., move money on-chain), not a generic browser or HTTP utility.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 18, 2026, 09:26 PM
Issues
1
Security Audit — snyk — creator-paywall