trading-ccxt-csharp

Warn

Audited by Snyk on Feb 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill directly uses methods such as fetchTicker, fetchTrades, fetchOrderBook and the WebSocket watch* methods to retrieve live market data and public trades from third-party exchange APIs (e.g., Binance), which are open/public, user-generated/untrusted sources that the agent is expected to read and interpret at runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a targeted integration guide for CCXT (crypto exchange) in C#, explicitly covering authenticated trading and fund management. It documents methods to create/cancel/edit orders (market/limit/stop/OCO/etc.), place market orders, manage margin/leverage, fetch and watch account balances, withdraw and transfer funds, create deposit addresses and convert/transfer currencies, and use API keys. These are specific crypto trading and wallet operations (placing market orders, withdrawals, transfers, signing/authentication) — i.e., direct financial execution capabilities, not generic tooling.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 18, 2026, 06:26 AM