almanak-strategy-builder
Warn
Audited by Snyk on Mar 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for DeFi financial operations and on-chain execution. It defines and documents concrete intent APIs that create and submit transactions (Intent.swap, Intent.lp_open/lp_close, Intent.supply/borrow/repay/withdraw, Intent.perp_open/perp_close, Intent.bridge, Intent.stake/unstake, Intent.vault_deposit/redeem, Flash loans, etc.). It references wallet private keys (ALMANAK_PRIVATE_KEY), a gateway that compiles transactions, and CLI commands for running strategies (including live runs and paper trading on Anvil). These are specific crypto/blockchain transaction capabilities (wallet signing, swaps, bridging, borrowing, staking, market orders), which meet the "Crypto/Blockchain (Wallets, Swaps, Signing)" criteria for Direct Financial Execution.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata