revolut-x-auth

Warn

Audited by Snyk on Apr 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed for a financial/crypto exchange (Revolut X). It provides Ed25519 keypair generation, configuration of API keys/private key env vars, and a signing helper (scripts/revx_sign.py) for authenticated requests to Revolut X endpoints (base URL, signing format, required headers). These capabilities are specific to crypto/financial API authentication and request signing (i.e., signing transactions/requests), not a generic tool, and therefore enable direct interaction with financial operations on the exchange.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 9, 2026, 09:10 PM
Issues
1