starknet-defi

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform on-chain crypto financial operations. It provides concrete APIs and code examples that sign and send transactions (Account with private key, RpcProvider) and calls functions that execute financial actions: executeSwap (token swaps), executeCreateDca (recurring buys), executeStake / executeClaimRewards / executeUnstake (staking flows), executeCancelDca, and references to lending/borrowing protocols. It also documents paymaster/gasless transaction usage and requires private keys and account addresses. These are specific crypto/blockchain transaction capabilities (wallet signing and sending transactions), not generic tooling, and therefore constitute Direct Financial Execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 02:26 AM