bitflow
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes on‑chain crypto trading and management functionality. It provides write operations that execute token swaps on mainnet (the "swap" subcommand returns txid and requires an unlocked wallet), creates and funds automated Keeper orders ("create-order"), can cancel orders, and manages Keeper contracts and user funding. These are direct blockchain transaction actions (wallet unlock, transaction submission, scheduled execution) — i.e., crypto/wallet transaction execution — which is a Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata