web3-testing

Warn

Audited by Snyk on May 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes blockchain transaction and signing capabilities: Hardhat network config exposes a PRIVATE_KEY for accounts, tests call token.transfer and interact with mainnet contracts (e.g., Uniswap swap), use impersonation (hardhat_impersonateAccount) and cheatcodes (vm.deal, vm.prank) to move funds, and demonstrate mainnet forking and contract interactions. These are concrete crypto/blockchain operations that can send transactions, sign or move tokens—i.e., direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 29, 2026, 05:49 AM
Issues
1
Security Audit — snyk — web3-testing