jupiter-vrfd
Warn
Audited by Snyk on Mar 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform a paid submission flow: it crafts a payment transaction, instructs the agent to sign it locally, and calls a dedicated execute endpoint to submit the transaction (cost: 1 JUP). The public routes include /payments/express/craft-txn and POST /payments/express/execute and the flow requires local signing of a crypto transaction. This is an explicit crypto/blockchain payment execution capability (signing and sending transactions), not a generic tool, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata