triggers

Warn

Audited by Snyk on Feb 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). Yes. The skill is explicitly a trading/execution service: chat commands and a TypeScript API create and send orders (e.g., /trigger buy, /trigger sell, /trigger swap), createTriggerService and triggers.create(...) calls, stop-loss/take-profit and OCO creation, futures entries with leverage, crypto spot swaps on Jupiter/Uniswap, and platform integrations (Binance, Bybit, Uniswap, etc.). It therefore provides specific, built-in capabilities to execute market orders, swaps, and manage positions on exchanges — i.e., direct financial execution.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 20, 2026, 08:53 PM