venice-x402

Warn

Audited by Snyk on Apr 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a wallet-based payment integration for USDC on Base. It defines a settlement endpoint (POST /x402/top-up) that accepts a signed payment header (X-402-Payment) to perform USDC transfers, returns payment/result fields (amountCredited, paymentId), and documents use of an x402 SDK to create EIP-712 transferWithAuthorization signatures with a wallet private key. It also exposes balance and transaction ledger endpoints and a client that can auto-top-up. This is a purpose-built crypto payment/settlement flow (including signing and sending on-chain transfer authorizations), so it provides direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 23, 2026, 08:03 PM
Issues
1