anchor
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an Anchor (Solana) development framework reference that explicitly documents blockchain transaction primitives: CPI (CpiContext), transfer, PDA signer, invoke/invoke_signed, and CLI for deploying/interacting with programs. These are crypto-specific APIs for signing and executing on-chain transactions (moving lamports/tokens), not generic tooling, so it provides direct capability to perform financial operations on-chain.
Audit Metadata