solidity-coding
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about Solidity smart-contract development and prescribes libraries/patterns that implement and handle on-chain value transfer: e.g., SafeERC20 for token transfers, PaymentSplitter (revenue sharing), rules that "Any contract that transfers tokens or ETH MUST use ReentrancyGuard + SafeERC20", stablecoin and ERC4626 vault templates, smart-account (ERC‑4337) and cross-chain token/message transfer (CCIP). It even references Foundry CLI actions for "call / send" and deployment/interaction scripts. These are specific crypto/blockchain constructs and guidance for creating contracts that move/manage funds on-chain, not generic coding tools—therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata