hydra-head-troubleshooter

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly about operating a Cardano/Hydra blockchain head and includes concrete blockchain tooling and key operations (cardano-cli commands, references to signing keys like cardano.sk and --hydra-signing-key, scripts tx id, and node snapshot interactions). These are specific crypto/blockchain operational commands (not generic browser or HTTP tooling) and involve signing-key handling and chain-specific ops. That meets the "Crypto/Blockchain (Wallets, Swaps, Signing)" criterion for Direct Financial Execution risk even though it focuses on troubleshooting rather than sending a payment; the presence of chain-specific signing/key commands makes it a crypto-capable skill and warrants flagging.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 10:38 AM