solidity-foundry-development

Warn

Audited by Snyk on Mar 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for Solidity smart-contract development and includes blockchain transaction and signing capabilities. It references vm.sign(pk, digest) (ECDSA signing), deployment commands that broadcast transactions (forge script ... --broadcast), and MCP tools like dry_run_deploy, check_deployment_status, and estimate_gas. These are specific crypto/blockchain functions for creating/signing/broadcasting transactions and managing deployments (i.e., directly interacting with wallets/RPCs and moving on-chain value). Therefore it provides direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 06:28 PM
Issues
1