cycles-management
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is explicitly about managing and moving value (cycles) on the Internet Computer. It documents concrete, programmatic financial operations and specific canister APIs: the Cycles Minting Canister (CMC) and cycles ledger IDs, commands like "icp cycles mint" and "icp canister top-up", Motoko/Rust calls such as Cycles.accept, attaching cycles to inter-canister calls, ic_cdk management canister functions (deposit_cycles, create_canister_with_extra_cycles, deposit_cycles(&DepositCyclesArgs, amount)), and examples that convert ICP to cycles and send/top-up cycles. These are specific blockchain token transfer and conversion operations (ICP ↔ cycles and depositing cycles), not generic tooling, so it grants direct financial execution authority.
Audit Metadata