positions

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed for trading/position management and includes APIs to place and manage orders: createPositionManager with an execution mode (orderType: 'market'|'limit'), functions to setStopLoss, setTakeProfit, setTrailingStop (including partial exits / sizePercent), and removal of stops. It documents market/limit order execution and automated triggering (start(), event handlers for stopLossTriggered/takeProfitTriggered with exitPrice and P&L). This is a specific tool whose primary purpose is to send/execute market and limit orders and manage positions — i.e., direct financial execution (market orders, partial exits, automated order sends).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 08:52 PM