positions
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for trading/position management and includes APIs to place and manage orders: createPositionManager with an execution mode (orderType: 'market'|'limit'), functions to setStopLoss, setTakeProfit, setTrailingStop (including partial exits / sizePercent), and removal of stops. It documents market/limit order execution and automated triggering (start(), event handlers for stopLossTriggered/takeProfitTriggered with exitPrice and P&L). This is a specific tool whose primary purpose is to send/execute market and limit orders and manage positions — i.e., direct financial execution (market orders, partial exits, automated order sends).
Audit Metadata