styx
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency swaps and on-chain BTC transactions. It exposes specific commands for creating deposit reservations, preparing PSBTs, signing with a wallet key, and broadcasting transactions to mempool.space. The "deposit" subcommand performs a full headless deposit flow (reserve liquidity, build & sign PSBT, broadcast) and requires an unlocked wallet — i.e., it constructs and executes on-chain transfers. This is a clear crypto/blockchain financial-execution capability (wallet signing, broadcasting, swap/minting), not a generic tool.
Audit Metadata