trading-ccxt-csharp
Warn
Audited by Snyk on Feb 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill directly uses methods such as fetchTicker, fetchTrades, fetchOrderBook and the WebSocket watch* methods to retrieve live market data and public trades from third-party exchange APIs (e.g., Binance), which are open/public, user-generated/untrusted sources that the agent is expected to read and interpret at runtime.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a targeted integration guide for CCXT (crypto exchange) in C#, explicitly covering authenticated trading and fund management. It documents methods to create/cancel/edit orders (market/limit/stop/OCO/etc.), place market orders, manage margin/leverage, fetch and watch account balances, withdraw and transfer funds, create deposit addresses and convert/transfer currencies, and use API keys. These are specific crypto trading and wallet operations (placing market orders, withdrawals, transfers, signing/authentication) — i.e., direct financial execution capabilities, not generic tooling.
Audit Metadata