architecture

Warn

Audited by Snyk on Feb 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly includes cryptocurrency/ecash payment capabilities: it references "Bitcoin Ecash" for micropayments, a dedicated package "keychat_ecash/ (Ecash wallet functionality)", Rust API "api_cashu.rs" and lists "Key APIs: Cashu". The message flow also states an "Ecash stamp attached (if relay requires payment)". These are specific crypto/wallet/payment components (wallet, signing/micropayments) rather than generic tooling, so the skill provides direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 28, 2026, 06:46 PM