relay-bridging
Warn
Audited by Snyk on May 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto payment/money-moving tool: it provides dedicated Relay endpoints for quoting and executing cross-chain swaps/bridges and "bridge+call" flows (POST /agent/relay/quote, POST /agent/relay/execute, GET /agent/relay/status). The execute flow performs end-to-end actions—fetching a quote, signing with user wallets (EVM EIP-712 and viem walletClient.sendTransaction, Solana signTransaction via Privy), submitting/broadcasting transactions, and returning tx hashes and final status. It includes parameters for token addresses, chain IDs, amounts, tx payloads (txs array), and manages gas top-ups and Solana delegation. This is specifically designed to move crypto value and submit on-chain transactions, i.e., direct financial execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata