use-aptos-cli
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for the Aptos blockchain CLI and includes commands that create/sign/submit on-chain transactions and manage private keys and accounts. Examples:
aptos move run(executes entry functions / submits transactions),aptos move deploy-objectandaptos move upgrade-object(deploy/upgrade contracts on mainnet/testnet), account/profile configuration withprivate_keyin ~/.aptos/config.yaml, gas confirmation prompts and the--assume-yesflag to auto-confirm transactions, andaptos account balance/ faucet funding. These are specific crypto/blockchain capabilities (wallet/account management and transaction submission), not generic tooling, so the skill grants direct financial execution authority.
Audit Metadata