web3-account-abstraction

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about ERC-4337 account abstraction and contains concrete, crypto-specific transaction operations: constructing and signing UserOperation objects, sending them via eth_sendUserOperation, executing Smart Account callData/execute/executeBatch, managing Paymaster deposits (entryPoint.depositTo), and enabling gasless/ERC20-pay-for-gas flows. These are specific blockchain wallet/transaction actions (signing/sending transactions and handling on-chain funds), so it grants direct crypto/financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 03:28 PM