siwa

Warn

Audited by Snyk on Feb 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes crypto wallet/signing primitives: signer factories (including Bankr Agent API wallets) and functions like signSIWAMessage and ERC-8128 HTTP signing/verification for on‑chain identities. Those are specific blockchain/wallet signing capabilities (not just generic HTTP or browser automation) and therefore meet the "Crypto/Blockchain (Wallets, ... Signing)" criterion for Direct Financial Execution risk.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 27, 2026, 02:46 PM