web3-testing
Warn
Audited by Snyk on May 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes blockchain transaction and signing capabilities: Hardhat network config exposes a PRIVATE_KEY for accounts, tests call token.transfer and interact with mainnet contracts (e.g., Uniswap swap), use impersonation (hardhat_impersonateAccount) and cheatcodes (vm.deal, vm.prank) to move funds, and demonstrate mainnet forking and contract interactions. These are concrete crypto/blockchain operations that can send transactions, sign or move tokens—i.e., direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata