erc8004-identity
Warn
Audited by Snyk on Feb 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly manages an on-chain wallet and performs blockchain transactions: it provides an EVMWalletProvider, stores an encrypted private key, and calls SDK functions to register/update an ERC-8004 identity on BNB Chain (e.g., sdk.register_agent, sdk.set_agent_uri). This is a specific crypto/blockchain capability (wallet signing and on-chain writes), not a generic tool, so it constitutes direct financial execution authority.
Audit Metadata