ton-create-wallet

Warn

Audited by Snyk on Jul 31, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for creating an on-chain TON agentic wallet and exposes RPC-like tools to start, complete, and manage wallet setups (agentic_start_root_wallet_setup, agentic_complete_root_wallet_setup, etc.). It states the agent keeps the operator private key and "can sign transactions autonomously" for an on-chain smart-contract wallet, which is a direct crypto execution capability (wallet creation/management and transaction signing). This matches the "Crypto/Blockchain (Wallets, Swaps, Signing)" criteria for Direct Financial Execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 31, 2026, 09:50 AM
Issues
1
Security Audit — snyk — ton-create-wallet