almanak-strategy-builder

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a DeFi trading strategy builder and execution SDK. It defines Intent factory methods that create on-chain actions (Intent.swap, Intent.lp_open, Intent.borrow/repay, Intent.perp_open/perp_close, Intent.bridge, Intent.vault_deposit/redeem, Intent.stake/unstake, flash loans, etc.), references a runtime private key (ALMANAK_PRIVATE_KEY), and documents CLI/gateway commands that compile intents into transactions and execute them (including live runs, paper trading on Anvil, and mainnet execution). These are specific crypto/blockchain transaction tools intended to move funds, so it meets the "Direct Financial Execution" criteria.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 07:55 AM