yield-agentkit
Warn
Audited by Snyk on Apr 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a DeFi execution toolkit: it exposes actions like actions_enter, actions_exit, and actions_manage to initiate on-chain deposits/withdrawals/claims, requires wallet addresses and amounts, returns transaction objects with unsignedTransaction, and mandates submit_hash after user signing plus get_transaction to poll confirmations. These are specific crypto/blockchain transaction operations (wallets, signing/broadcasting, submitting tx hashes) designed to move funds and manage positions across networks — not generic tooling. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata