NYC

send-usdc

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to transfer funds: it provides a dedicated "send" command to transfer USDC to Ethereum addresses or ENS names, includes authentication and balance prerequisites, ENS resolution, and example invocations (e.g., npx awal@latest send 1 0x..., send '$5.00' vitalik.eth). This is a specific crypto-wallet/payment operation (sending USDC on a blockchain), not a generic capability, so it grants Direct Financial Execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 10:20 PM