almanak-strategy-builder
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a DeFi trading strategy builder and execution SDK. It defines Intent factory methods that create on-chain actions (Intent.swap, Intent.lp_open, Intent.borrow/repay, Intent.perp_open/perp_close, Intent.bridge, Intent.vault_deposit/redeem, Intent.stake/unstake, flash loans, etc.), references a runtime private key (ALMANAK_PRIVATE_KEY), and documents CLI/gateway commands that compile intents into transactions and execute them (including live runs, paper trading on Anvil, and mainnet execution). These are specific crypto/blockchain transaction tools intended to move funds, so it meets the "Direct Financial Execution" criteria.
Audit Metadata