swarms-marketplace-api

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents API endpoints for launching tokens on Solana (single and batch token launch operations which mint tokens and incur a creation fee of ~0.04 SOL deducted from a provided private key). These are direct financial operations (token purchases/mints and creation fee settlements). Although the endpoints require an API key in the Authorization header (SKILL.md:30), the token launch routes execute blockchain transactions using a provided private_key supplied directly in the request body (SKILL.md:206, 262), and there is no documented independent access control or external verification step (such as user-facing multi-factor authentication or out-of-band authorization) enforced by the service layer for these direct financial routes beyond the API key.