index-bot
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute cryptocurrency trades and manage on-chain asset purchases. It delegates each buy and rebalance leg to a swap-integration "Trading API" flow (check_approval → quote → swap) and uses viem-integration for signing and broadcasting transactions. It resolves token addresses, checks approvals, constructs and delegates swaps, checks on-chain balances, and supports an "autonomous" execution mode that can broadcast transactions without per-transaction prompts (subject to guardrails). These are explicit crypto/blockchain financial execution capabilities (swaps, signing, broadcasting), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata