skill-03-defi-operations
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to perform on-chain financial operations. It lists DeFi actions (swaps on DEXs, lending/borrowing, staking, liquidity provision, flash loans, perpetual trading, vault interactions), references protocol-specific function calls (e.g., supply(), borrow(), submit()), requires blockchain-rpc-server and defi-protocol-server, and prescribes transactional steps: get quotes, set slippage, approve exact amounts, execute swaps, build flash-loan callback contracts, simulate and send transactions, and verify received amounts. These are concrete instructions and interfaces for moving funds and executing financial transactions on-chain, not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata