web3-forge
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Foundry (web3) testing and scripting toolset for Ethereum-like chains. It includes deployment scripts and commands that broadcast signed transactions (e.g., "forge script ... --broadcast --verify"), references to env vars for signing keys (ETH_FROM, MNEMONIC), fork tests that manipulate token balances, and patterns for interacting with tokens (forceApprove, deal()). These are specific crypto/blockchain capabilities that enable signing and sending on-chain transactions (i.e., moving value). Therefore it provides direct financial execution capability.
Audit Metadata