controller-react
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to interact with crypto wallets and execute on-chain transactions. It defines ControllerConnector policies for token approvals/transfers, shows account.execute([...]) calls that perform approve and transfer on an ETH token contract, and exposes wallet-specific methods (externalWaitForTransaction, externalSwitchChain) and supported wallet types (metamask, phantom, argent, etc.). These are concrete blockchain transaction and wallet-management operations (signing/sending transfers), not generic browser or HTTP tooling, so it grants direct financial execution capability.
Audit Metadata