yield-strategies
Warn
Audited by Snyk on Feb 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform crypto financial operations. It targets DeFi protocols (Aave, Compound, etc.) and exposes concrete commands to deposit and withdraw tokens (fdx call depositForYield, fdx call withdrawFromYield), requires wallet authentication, accepts chain, strategyId/positionId, amount, and even a recipient address. These are direct blockchain wallet/transaction actions (signing/sending funds) rather than generic tooling, so it grants direct financial execution capability.
Audit Metadata