pyth
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill directly fetches and streams real-time price updates from a public third-party API (the Hermes endpoint at https://hermes.pyth.network, e.g. client.getLatestPriceUpdates and getPriceUpdatesStream) and processes those parsed updates as part of its workflow, exposing the agent to external, untrusted data.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for blockchain financial infrastructure (Pyth Network). It includes specific crypto APIs and wallet transaction code: Keypair.fromSecretKey, Connection (Solana), pythReceiver.newTransactionBuilder(), addPostPriceUpdates(), buildVersionedTransactions(), and connection.sendTransaction(tx). These are concrete wallet/transaction signing and on-chain posting operations (crypto/blockchain execution), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata