architecture
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes cryptocurrency/ecash payment capabilities: it references "Bitcoin Ecash" for micropayments, a dedicated package "keychat_ecash/ (Ecash wallet functionality)", Rust API "api_cashu.rs" and lists "Key APIs: Cashu". The message flow also states an "Ecash stamp attached (if relay requires payment)". These are specific crypto/wallet/payment components (wallet, signing/micropayments) rather than generic tooling, so the skill provides direct financial execution capability.
Audit Metadata