controller-backend

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a blockchain transaction controller for Starknet: it provides SessionProvider/Controller APIs to sign and execute on-chain transactions (approve, transfer, execute, deploy), includes examples that send token transfers and construct FunctionCall objects, and describes headless operation with private signing keys and session-based pre-approved transactions. Those are specific crypto wallet/transaction execution capabilities (signing and sending transactions to a network), so it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 02:13 AM