agent-identity
Warn
Audited by Snyk on Feb 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes specific on-chain transaction actions and wallet operations: it can mint an NFT identity via agent_register, create wallets (cryptoclaw wallet create), and set the agent's designated wallet using EIP-712 signed agent_set_wallet. It lists contract addresses and notes state-changing transactions and gas. These are concrete crypto/blockchain capabilities (wallet creation, signing, and on-chain transactions), which match the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution.
Audit Metadata