hardhat

Warn

Audited by Snyk on Mar 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. This skill is explicitly for Ethereum development and includes concrete, specific capabilities to sign and send blockchain transactions: deploying contracts (hre.ethers.deployContract), managing accounts via private keys (accounts: [process.env.PRIVATE_KEY], export PRIVATE_KEY), integrating wallets/providers (ethers.js, getSigners, RPC URLs), and direct provider calls (hre.network.provider.send). These are crypto/blockchain operations that enable transaction signing and on-chain execution, so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 7, 2026, 05:44 PM