use-circle-wallets
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to "Always read this first" from https://developers.circle.com/llms.txt, indicating a runtime fetch of a remote text file that would supply LLM-facing instructions and thus directly control prompts and is treated as a required dependency.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about selecting and implementing Circle cryptocurrency wallet types for onchain applications. It describes developer-controlled wallets (backend programmatic control), user-controlled and modular wallets, and explicitly lists scenarios like "programmatic payouts" and "autonomous multi-chain transactions." It instructs delegation to implementation skills for developer-controlled wallets (which enable backend-controlled signing/execution) and discusses account types, gas sponsorship, and onchain transaction patterns. These are specific crypto wallet capabilities that enable sending/signing onchain transactions and moving funds, so this is direct financial execution functionality.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata