derivatives-trading-options

Warn

Audited by Snyk on Mar 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is a specific Binance derivatives/options trading integration that requires API key and secret and exposes authenticated TRADE endpoints such as New Order (POST /eapi/v1/order), Place Multiple Orders (POST /eapi/v1/batchOrders), Accept Block Trade Order (POST /eapi/v1/block/order/execute), Cancel orders (DELETE endpoints), Auto-Cancel All Open Orders (countdownCancelAll), and other trading/account endpoints. It explicitly documents signing with the secret key and headers for executing trades and instructs on performing transactions on mainnet (including confirming with the user). These are direct mechanisms to place, execute, and cancel market/derivative orders on an exchange—i.e., directly move or manage financial assets—so it constitutes Direct Financial Execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 19, 2026, 10:00 AM
Issues
1