@1390/woofi-bot

Warn

Audited by Snyk on Mar 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly exposes swap execution APIs for crypto trades. It includes a POST /v1/swap endpoint that generates blockchain-ready transaction data (tx_steps) with approval steps, a needs_approve flag, and instructions that these tx_steps must be signed and broadcast by a wallet. The skill therefore provides specific, built-in support for constructing and executing on-chain token swaps (wallet signing and broadcasting), i.e., direct crypto financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 23, 2026, 05:29 PM
Issues
1