web3-data
Warn
Audited by Snyk on Mar 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes Chainbase CLI commands that go beyond read-only data queries: it documents a --x402 micropayment mode and instructs users to configure a private key via
chainbase config set private-key 0x...(signing capability), and it includes achainbase contract call --address ... --function ... --abi ... --params ...command to invoke smart-contract functions. These are explicit crypto/blockchain capabilities (signing and contract invocation) that can be used to execute on-chain transactions, so this is direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata