building-blocks
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly focused on DeFi financial operations and includes concrete on-chain execution primitives: contract addresses for routers/pools, router function signatures (e.g., swapExactTokensForTokens), Aave flash loan calls (POOL.flashLoanSimple), token approvals, ERC-4626 deposit/redeem patterns, and example Solidity receiver/arb code that borrows, swaps, and repays. These are specific crypto/blockchain transaction APIs and examples to move funds on-chain (swaps, flash loans, deposits/withdrawals), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata