aster-api-trading-v3

Warn

Audited by Snyk on Mar 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a trading API for Aster Futures with endpoints to place, batch, cancel, and query orders (e.g., POST /fapi/v3/order, POST /fapi/v3/batchOrders, DELETE /fapi/v3/order, DELETE /fapi/v3/allOpenOrders). It includes trading-specific parameters (symbol, side BUY/SELL, order types, quantity, price, stopPrice, closePosition, etc.) and signed TRADE/USER_DATA auth. Its primary and explicit purpose is to execute financial transactions (market and conditional orders) on an exchange, so it grants direct financial execution capability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 6, 2026, 03:06 PM