web3-frontend

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly focused on Web3 financial operations: wallet integration (RainbowKit, WalletConnect, Account Abstraction), transaction management and "Write Operations" (contract writes), signing/auth (EIP-712, SIWE, Permit, message signing), and uses crypto-specific libraries (wagmi, viem). Code examples show direct transaction execution (useWriteContract/writeContract with value parseEther('0.08')), signing typed data, and wallet.sendTransaction — all of which enable sending on-chain transactions and moving crypto funds. These are specific crypto/blockchain execution capabilities (not generic tools), so it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:22 PM