ton-tact
Warn
Audited by Snyk on Feb 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a smart-contract language toolkit for the TON blockchain (Tact). It documents send()/SendParameters, reply/forward/notify/cashback, deploy, contractAddress/newAddress, myBalance, getStorageFee/getComputeFee/setGasLimit, message modes (SendRemainingValue, etc.), and cryptography primitives (checkSignature, SignedBundle). These are specific blockchain transaction primitives (sending messages/transactions, deploying contracts, managing gas/fees, addresses and signing) — i.e., explicit crypto/blockchain execution capabilities to move value on-chain. Therefore it grants direct financial execution authority.
Audit Metadata