use-modular-wallets
Warn
Audited by Snyk on Mar 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for crypto wallet creation and transaction execution using the Circle Modular Wallets SDK. It includes SDK setup (client key/URL), constructors/transports (toModularTransport, toPasskeyTransport), and explicit transaction functions and patterns: sendUserOperation, batching multiple calls into a single user operation, gas sponsorship via Circle Gas Station (paymaster: true), and examples of gasless USDC transfers. It also documents passkey recovery, mnemonic handling, and security rules requiring user confirmation before transfers. These are direct financial execution capabilities (signing/sending crypto transactions and transferring USDC), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata