t2000-mcp

Warn

Audited by Snyk on Apr 2, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a financial/money-transfer toolset. It defines wallet and MCP server setup, wallet address/balance tools, and many state-changing operations that move funds or execute financial actions: t2000_send (Send USDC), t2000_save (deposit to savings), t2000_withdraw, t2000_borrow, t2000_repay, t2000_pay (pay for and call any MPP API service with USDC), sweep/claim-rewards prompts, and engine adapter exposing deposit/pay-like tools. These are specific, named functions for sending currency, paying services, and managing accounts/wallets — not generic browser or API callers. Therefore it grants direct financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 2, 2026, 08:02 AM
Issues
1