bitmart-exchange-spot

Warn

Audited by Snyk on Mar 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a BitMart spot-trading integration: it defines authenticated SIGNED endpoints, HMAC signature generation, required API keys, and numerous WRITE endpoints for placing and managing trades (e.g., POST /spot/v2/submit_order, POST /spot/v1/margin/submit_order, batch orders, cancel orders, margin borrow/repay/transfer). The quickstart includes a concrete example to place a limit buy order with signing, and the Operation Flow demands explicit CONFIRM before executing WRITE calls. This is a purpose-built crypto trading/execution skill (directly moves crypto funds via market/limit orders and margin ops), not a generic tool — therefore it grants direct financial execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 26, 2026, 10:39 AM
Issues
1