xrpl-payments
Warn
Audited by Snyk on Jun 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a payments domain skill for the XRP Ledger: it constructs transaction objects for XRP transfers, RLUSD, IOU/token transfers, cross-currency conversions, escrows, and related payment operations. It includes XRPL-specific concepts (trust lines, memos, SourceTag, simulate, fees/reserves) and is intended to be paired with the XRPL Agent Wallet skill to sign and submit those transactions. Although signing/submission are delegated to a separate Wallet skill, this skill's primary and explicit purpose is to create and drive on‑chain value-transfer transactions (crypto/blockchain payments), so it constitutes direct financial execution capability when combined with the Wallet.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata