contract-verification
Warn
Audited by Snyk on Mar 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for interacting with the Celo blockchain and contains concrete, crypto-specific tooling and commands. It references Hardhat and Foundry configs that use a PRIVATE_KEY env var (accounts: [process.env.PRIVATE_KEY]), a forge create command that includes --private-key to sign and deploy contracts, and RPC endpoints (forno.celo.org) — all of which enable signing and submitting on-chain transactions. It also documents Blockscout/Sourcify/Etherscan API endpoints for verification. Because it includes explicit crypto/blockchain signing and deployment steps (use of private keys and transaction-sending CLI flags), it provides direct crypto execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata