e2e-testing
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is an E2E testing toolkit, but it explicitly includes Web3/wallet testing and a "金融 / 关键流程测试 (Financial / Critical Flow Testing)" example that performs a trade: it mocks window.ethereum (wallet provider), demonstrates wallet connection, fills a trade amount, clicks confirm, and waits for an /api/trade response (with a comment noting it involves real money). These are concrete, finance-specific flows (wallet/web3 + trade execution/market order) rather than purely generic browser automation, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata