endaoment
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements on-chain crypto donation functionality: it lists smart contract addresses, requires a PRIVATE_KEY, requires USDC on Base, and provides commands to "approve" USDC and to "donate " (i.e., send transactions to move funds). This is a specific crypto/wallet transaction capability (signing/sending tokens), which is direct financial execution.
Audit Metadata