derivatives-trading-options
Warn
Audited by Snyk on Mar 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a specific Binance derivatives/options trading integration that requires API key and secret and exposes authenticated TRADE endpoints such as New Order (POST /eapi/v1/order), Place Multiple Orders (POST /eapi/v1/batchOrders), Accept Block Trade Order (POST /eapi/v1/block/order/execute), Cancel orders (DELETE endpoints), Auto-Cancel All Open Orders (countdownCancelAll), and other trading/account endpoints. It explicitly documents signing with the secret key and headers for executing trades and instructs on performing transactions on mainnet (including confirming with the user). These are direct mechanisms to place, execute, and cancel market/derivative orders on an exchange—i.e., directly move or manage financial assets—so it constitutes Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata