venice-x402
Warn
Audited by Snyk on Apr 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a wallet-based payment integration for USDC on Base. It defines a settlement endpoint (POST /x402/top-up) that accepts a signed payment header (X-402-Payment) to perform USDC transfers, returns payment/result fields (amountCredited, paymentId), and documents use of an x402 SDK to create EIP-712 transferWithAuthorization signatures with a wallet private key. It also exposes balance and transaction ledger endpoints and a client that can auto-top-up. This is a purpose-built crypto payment/settlement flow (including signing and sending on-chain transfer authorizations), so it provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata