zerion-0x

Warn

Audited by Snyk on May 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency token swaps via the 0x APIs. It includes concrete, 0x-specific endpoints and flows (Swap API v2, Gasless API v2, AllowanceHolder, Permit2), shows how to obtain firm quotes, and provides step-by-step instructions and code for signing EIP-712 messages, approving allowances, sending transactions (walletClient.sendTransaction), and submitting gasless trades to 0x. These are direct crypto/blockchain execution actions (wallet signing, submitting transactions, and calling payment/swap APIs), not generic tooling. Therefore it grants Direct Financial Execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 18, 2026, 12:49 PM
Issues
1
Security Audit — snyk — zerion-0x