glam
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to execute on-chain financial operations. It requires a keypair and RPC URL, exposes CLI and SDK commands that perform swaps, deposits, trades, lending, staking, bridging, token transfers, and minting/burning of share tokens. Examples:
jupiter swap/client.jupiterSwap.swap,drift-protocol depositandperptrading,kamino-lend deposit,cctp bridge-usdc,glam-cli transfer, and SDK methodsclient.mint.*(freeze, issue, burn, forceTransfer). These are specific crypto/blockchain transaction capabilities (signing and sending transactions), not generic tooling, and therefore constitute direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata