hydra-head-troubleshooter
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly about operating a Cardano/Hydra blockchain head and includes concrete blockchain tooling and key operations (cardano-cli commands, references to signing keys like cardano.sk and --hydra-signing-key, scripts tx id, and node snapshot interactions). These are specific crypto/blockchain operational commands (not generic browser or HTTP tooling) and involve signing-key handling and chain-specific ops. That meets the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution risk even though it focuses on troubleshooting rather than sending a payment; the presence of chain-specific signing/key commands makes it a crypto-capable skill and warrants flagging.
Audit Metadata