bitflow

Warn

Audited by Snyk on Mar 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes on‑chain crypto trading and management functionality. It provides write operations that execute token swaps on mainnet (the "swap" subcommand returns txid and requires an unlocked wallet), creates and funds automated Keeper orders ("create-order"), can cancel orders, and manages Keeper contracts and user funding. These are direct blockchain transaction actions (wallet unlock, transaction submission, scheduled execution) — i.e., crypto/wallet transaction execution — which is a Direct Financial Execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 08:52 PM
Issues
1