wagmi
Warn
Audited by Snyk on Oct 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides instructions and examples for building React components that connect wallets and interact with smart contracts (specifically, reading and writing contract data such as ERC-20 token transfers using
useWriteContract). This constitutes a direct financial operation (blockchain transactions/transfers). However, the implementation relies on client-side wallet integration (useWriteContract), which inherently requires user interaction and signature confirmation through an independent external wallet provider (e.g., MetaMask, WalletConnect) handled by the user's browser extension or application layer. Therefore, qualifying independent access control (wallet signing and user authorization) is present.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata