use-gateway
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to move money: it integrates Circle Gateway to hold and transfer USDC across chains, includes contract addresses (Gateway Wallet, Gateway Minter), describes deposit, create burn intent, signing (EIP-712 / Ed25519), submitting burn intents to the Gateway REST API, and calling gatewayMint to mint on destination chains. It provides server-side developer-controlled transfer patterns (e.g., transfer-evm-circle-wallet) and detailed instructions for executing on-chain burns/mints/attestations. These are specific crypto/Blockchain payment operations (sending/transferring USDC), not generic tooling, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata