world-extractable-value

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly financial in purpose (Paradigm Multiverse Finance integration) and defines domain-specific asset/ownership operations that move balances. It specifies a Map[verse_id, owner_address] -> balance and concrete transfer semantics: "Splitting: parent.balance -= x; for child in partition: child.balance += x" and "Combining: for child in partition: child.balance -= x; parent.balance += x" as well as "push_down(partition)" and "pull_up(resolution)" ownership operations used to extract value. These are explicit state-changing asset-transfer primitives (i.e., sending value between owners), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:38 PM