investment
Warn
Audited by Snyk on Apr 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to move money. It provides authenticated SDK setup with Funding API Keys and private keys, EIP-712 signing of investment/redemption messages, and direct API calls to endpoints like /full/v1/vault_invest and /full/v1/vault_redeem. The vault_invest and vault_redeem helper functions sign and submit transactions to invest/withdraw funds, and canceling redemptions also posts to a vault redemption endpoint. These are specific financial operations (investing, redeeming, submitting signed transactions) not generic capabilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata