viem
Warn
Audited by Snyk on Feb 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a TypeScript client specifically for Ethereum with explicit transaction and wallet features. It exposes contract write operations (writeContract, simulateContract), clients including Wallet/Public/Test clients, account types that include local privateKey and mnemonic and JSON-RPC accounts, and public actions like getBalance and waitForTransactionReceipt. These are direct crypto/blockchain capabilities (signing/sending transactions, managing wallets), which are explicitly designed to move value on-chain rather than being a generic tool. Therefore it grants direct financial execution authority.
Audit Metadata