sell
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to accept and settle USDC payments on-chain. It includes wallet creation (WALLET_PRIVATE_KEY), network and USDC contract addresses for EVM and Solana, CLI commands to create/top-up wallets, and explicit facilitator client URLs (e.g., Coinbase CDP) with verify/settle payment flows. The middleware and SDK examples set payTo addresses and call a facilitator to verify and settle transactions. These are specific crypto/payment APIs and functions for moving money, not generic tooling.
Audit Metadata