use-aptos-cli

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for the Aptos blockchain CLI and includes commands that create/sign/submit on-chain transactions and manage private keys and accounts. Examples: aptos move run (executes entry functions / submits transactions), aptos move deploy-object and aptos move upgrade-object (deploy/upgrade contracts on mainnet/testnet), account/profile configuration with private_key in ~/.aptos/config.yaml, gas confirmation prompts and the --assume-yes flag to auto-confirm transactions, and aptos account balance / faucet funding. These are specific crypto/blockchain capabilities (wallet/account management and transaction submission), not generic tooling, so the skill grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:42 AM