eip-712
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about EIP-712 typed data signing and verification for Ethereum: it documents and uses wallet signing APIs (eth_signTypedData_v4 via wagmi's useSignTypedData / signTypedDataAsync), server-side recovery (viem's recoverTypedDataAddress), and references wallets (MetaMask, burner wallet). These are crypto/blockchain signing primitives (explicitly listed in the CORE RULE as a Direct Financial Execution capability). Although it doesn't itself submit on-chain transactions, it provides explicit, purpose-built signing tools (not generic browser automation or general HTTP calls), so it meets the criteria for Direct Financial Execution authority.
Audit Metadata