ccxt-csharp
Warn
Audited by Snyk on Feb 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). Yes. This skill is explicitly designed for cryptocurrency exchange integration and contains numerous specific methods to execute financial actions: creating orders (createOrder, CreateLimitBuyOrder, CreateMarketBuyOrder, createMarketSellOrder, createOrderWithTakeProfitAndStopLoss, OCO, stop/limit/stop-market, trailing orders, etc.), cancelling and editing orders (cancelOrder, cancelAllOrders, editOrder), placing orders via WebSocket (createOrderWs and related *Ws methods), fetching and managing balances (fetchBalance, watchBalance), withdrawals and deposits (withdraw, fetchDepositAddress, createDepositAddress), internal transfers (transfer), converting assets (createConvertTrade), margin/leverage actions (borrowMargin, repayMargin, setLeverage, setMarginMode), and other account-affecting operations. It also documents authentication with API keys and marks the above methods as requiring credentials. These are concrete, specific financial execution capabilities (moving crypto funds and placing market orders), so the skill grants direct financial execution authority.
Audit Metadata