check-bitcoin
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly targeted at Bitcoin payment integration and directly interacts with wallet/node primitives (bitcoin-cli calls: getwalletinfo, listunspent, getaddressinfo, listdescriptors, estimatesmartfee, etc.). It inspects private_keys_enabled, UTXO consolidation status, fee-bumping automation, and references related endpoints for fixing and full Bitcoin lifecycle management. Those are crypto/wallet-specific operations (wallet management, UTXO handling, fee/rbf/CPFP policies) which fall under the "Crypto/Blockchain (Wallets, ... Signing)" category in the core rule. Even though the prompt claims it "only investigates and reports," the skill is specifically designed for blockchain wallet/payment operations and therefore represents direct financial execution risk.
Audit Metadata