erc8004-avalanche
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly enables on-chain transaction signing and submission on Avalanche C-Chain. It requires a PRIVATE_KEY, RPC URL, and shows cast/ethers/viem examples using --private-key to send transactions (e.g., register, giveFeedback) and references AVAX gas fees and mainnet/fuji addresses. These are concrete crypto/blockchain signing and transaction capabilities (wallet signing and contract interactions), which constitute direct financial execution authority.
Audit Metadata