controller-backend
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a blockchain transaction controller for Starknet: it provides SessionProvider/Controller APIs to sign and execute on-chain transactions (approve, transfer, execute, deploy), includes examples that send token transfers and construct FunctionCall objects, and describes headless operation with private signing keys and session-based pre-approved transactions. Those are specific crypto wallet/transaction execution capabilities (signing and sending transactions to a network), so it grants direct financial execution authority.
Audit Metadata