multiversx-factory-manager
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a blockchain-specific factory/manager for MultiversX smart contracts. It exposes explicit on-chain transaction calls (self.tx().typed(...).init(...).from_source(...).sync_call(), .upgrade(), etc.) and references CodeMetadata::PAYABLE and that children can receive EGLD. This is a crypto/blockchain-specific capability (deploying/upgrading contracts and enabling them to accept native token payments) rather than a generic tool, so it qualifies as direct financial execution capability.
Audit Metadata