wallet-core
Warn
Audited by Snyk on Mar 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto wallet library: it provides HD wallet/key generation, private keys, address derivation, and explicit transaction signing APIs for 140+ blockchains (examples: Ethereum, Bitcoin, Cosmos). The docs and code samples show constructing signing inputs with privateKey and calling AnySigner.sign to produce raw signed transactions. Even though it "does not handle networking or broadcasting," the ability to create and sign blockchain transactions is a specific crypto/blockchain financial execution capability. Therefore it meets the criterion for Direct Financial Execution.
Audit Metadata