orderly-deposit-withdraw
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to move and manage crypto funds. It includes concrete, finance-specific operations: wallet-connected ERC20 allowance approvals (approve(), MaxUint256), executing deposit transactions via a vault contract (vault.deposit), withdraw flows that require creating and signing EIP-712 withdrawal messages and POSTing /v1/withdraw_request, cross-chain withdrawal options, internal transfers via POST /v1/internal_transfer, and direct contract addresses and REST endpoints for deposit/withdraw operations. These are specific payment/crypto primitives (wallet signing, on-chain transactions, transfer endpoints) — not generic tooling — so it grants direct financial execution capability.
Audit Metadata