@1826/woofi-zero-slippage
Warn
Audited by Snyk on Mar 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency token swaps across multiple EVM chains. It exposes specific swap-related functions (woofi_query_swap, woofi_calculate_slippage, woofi_build_swap_transaction, woofi_compare_routes) and in particular woofi_build_swap_transaction returns transaction fields (to, data, value, gas_limit, min_output) "ready for signing". The usage example demonstrates executing the swap by sending the built transaction via wallet_transfer and obtaining a tx_hash. This is direct crypto execution capability (building/signing/sending on-chain transactions), so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata