bracketsbot-skill
Warn
Audited by Snyk on Mar 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes on-chain transaction preparation and wallet signing flows. It provides specific commands like "bracketsbot prepare-submit-tx --json", references preparing transaction payloads for on-chain submission, and instructs handing that payload to wallet tooling (Bankr or another EVM signer). It also directs users to submit via browser wallets (MetaMask, Coinbase Wallet) using the share link. These are concrete crypto/blockchain signing and submission capabilities (wallet integration and transaction sending), which meet the definition of Direct Financial Execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata