@1390/woofi-bot
Warn
Audited by Snyk on Mar 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes swap execution APIs for crypto trades. It includes a POST /v1/swap endpoint that generates blockchain-ready transaction data (tx_steps) with approval steps, a needs_approve flag, and instructions that these tx_steps must be signed and broadcast by a wallet. The skill therefore provides specific, built-in support for constructing and executing on-chain token swaps (wallet signing and broadcasting), i.e., direct crypto financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata