xrpl-agent-wallet

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a crypto wallet and transaction execution layer for the XRPL. It contains concrete, specific functionality to generate wallets (Wallet.generate()), load seeds (Wallet.fromSeed / env var), sign transactions (wallet.sign or ExternalSigner.sign), persist transaction hashes, and submit transactions to the network via client.submitAndWait. It also includes an auto-sign override and detailed signing/submission ceremony. These are direct blockchain wallet and transaction execution capabilities (signing and submitting fund-moving transactions), not generic tooling, so it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 10:29 PM
Issues
1
Security Audit — snyk — xrpl-agent-wallet