privy-integration

Warn

Audited by Snyk on Mar 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about crypto wallet integration and transaction execution: it documents embedded wallets (EVM + Solana), smart wallets (ERC-4337), transaction signing, a useSendTransaction hook with a sendTransaction({to:..., value:...}) example, gas sponsorship, wallet APIs, and wallet funding/export. Those are specific tools and functions for creating and sending blockchain transactions (signing and moving crypto), so this is direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 8, 2026, 05:48 PM