relay-bridging

Warn

Audited by Snyk on May 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a crypto payment/money-moving tool: it provides dedicated Relay endpoints for quoting and executing cross-chain swaps/bridges and "bridge+call" flows (POST /agent/relay/quote, POST /agent/relay/execute, GET /agent/relay/status). The execute flow performs end-to-end actions—fetching a quote, signing with user wallets (EVM EIP-712 and viem walletClient.sendTransaction, Solana signTransaction via Privy), submitting/broadcasting transactions, and returning tx hashes and final status. It includes parameters for token addresses, chain IDs, amounts, tx payloads (txs array), and manages gas top-ups and Solana delegation. This is specifically designed to move crypto value and submit on-chain transactions, i.e., direct financial execution.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 1, 2026, 10:06 AM
Issues
1