upgrade-stellar-contracts

Warn

Audited by Snyk on Mar 5, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is specifically about operating on the Stellar blockchain (Soroban): it provides concrete, purpose-built code and APIs for performing on-chain contract upgrades (e.g., UpgradeableClient.upgrade, env.invoke_contract, an Upgrader contract). Those are explicit blockchain transaction operations that can change contract code/state and therefore directly affect assets controlled by contracts. This is a specific crypto/blockchain capability (not a generic tool) to perform on-chain transactions, so it meets the Direct Financial Execution criterion.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 5, 2026, 06:41 PM