aicoin-trading
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. The skill is explicitly a trading/order-execution tool: it defines and requires calling node scripts/exchange.mjs create_order (with a two-step preview+confirmed flow) to place market/derivatives orders, and provides explicit commands for cancel_order, set_leverage, set_trading_params and market queries tied to specific exchanges (Binance, OKX, Bybit, etc.). Those are direct market-order and exchange-integration actions (i.e., moving funds/creating trades), not generic tooling. Therefore it grants direct financial execution capability.
Audit Metadata