e2e-testing

Warn

Audited by Snyk on Mar 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is an E2E testing toolkit, but it explicitly includes Web3/wallet testing and a "金融 / 关键流程测试 (Financial / Critical Flow Testing)" example that performs a trade: it mocks window.ethereum (wallet provider), demonstrates wallet connection, fills a trade amount, clicks confirm, and waits for an /api/trade response (with a comment noting it involves real money). These are concrete, finance-specific flows (wallet/web3 + trade execution/market order) rather than purely generic browser automation, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 13, 2026, 12:38 AM
Issues
1