web-e2e
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill includes explicit blockchain testing APIs (the anvil fixture and related helpers) that directly manipulate crypto state: e.g., TEST_WALLET_ADDRESS auto-connected wallet, anvil.setErc20Balance, anvil.getErc20Balance, anvil.setErc20Allowance, anvil.setPermit2Allowance, anvil.mine, balance queries and snapshot/revert. These are specific crypto/blockchain operations (managing balances/allowances, mining blocks, interacting with a wallet) rather than generic browser or HTTP tools. Under the rules, Crypto/Blockchain capabilities (wallets, swaps, signing, balance/allowance management) qualify as Direct Financial Execution authority.
Audit Metadata