sablier-create-payment
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly implements on-chain token payment stream creation and execution. It instructs the agent to create Sablier Flow streams, requires ERC‑20 token contract addresses, recipient addresses, deposit amounts, and routing for "create" vs "createAndDeposit" (funding streams). It also distinguishes "Execution intent" where the agent will "create a payment stream on their behalf (run CLI transactions)" and references EVM CLI execution. These are concrete crypto transaction operations (sending/funding token streams), not generic tooling, and therefore constitute direct financial execution capability.
Audit Metadata