upgrade-stellar-contracts
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is specifically about operating on the Stellar blockchain (Soroban): it provides concrete, purpose-built code and APIs for performing on-chain contract upgrades (e.g., UpgradeableClient.upgrade, env.invoke_contract, an Upgrader contract). Those are explicit blockchain transaction operations that can change contract code/state and therefore directly affect assets controlled by contracts. This is a specific crypto/blockchain capability (not a generic tool) to perform on-chain transactions, so it meets the Direct Financial Execution criterion.
Audit Metadata