nexus-sdk-hooks-events
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for blockchain financial operations: it provides hooks to handle "intent"/"allowance"/"swap intent" flows, includes allowance decisions (token approvals), swap and bridge operations, and references wallet connection, signatures, transaction errors (INSUFFICIENT_BALANCE, TRANSACTION_REVERTED, USER_DENIED_INTENT_SIGNATURE). The SDK's primary purpose is to approve/deny and drive on-chain transfers/swaps/bridges and manage allowances — i.e., direct crypto transaction execution and signing — not a generic tool. Therefore it grants direct financial execution capability.
Audit Metadata