jingswap-cycle-agent
Warn
Audited by Snyk on Apr 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly built to enable on-chain crypto asset operations: it evaluates JingSwap STX↔sBTC cycles and, when favourable, prepares a DEPOSIT_READY execution payload with exact deposit parameters (amount_stx, micro amount, market, cycle) and instructs the parent agent to call jingswap_deposit_stx to perform the deposit. Although reads are read-only, the "participate" command's primary purpose is to trigger/prepare a STX→sBTC deposit (a crypto transfer/trade). This is a specific, financial blockchain action (depositing STX to acquire sBTC), not a generic tool, so it constitutes Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata