aster-api-trading-v3
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading API for Aster Futures with endpoints to place, batch, cancel, and query orders (e.g., POST /fapi/v3/order, POST /fapi/v3/batchOrders, DELETE /fapi/v3/order, DELETE /fapi/v3/allOpenOrders). It includes trading-specific parameters (symbol, side BUY/SELL, order types, quantity, price, stopPrice, closePosition, etc.) and signed TRADE/USER_DATA auth. Its primary and explicit purpose is to execute financial transactions (market and conditional orders) on an exchange, so it grants direct financial execution capability.
Audit Metadata