bitmart-exchange-spot
Warn
Audited by Snyk on Mar 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a BitMart spot-trading integration: it defines authenticated SIGNED endpoints, HMAC signature generation, required API keys, and numerous WRITE endpoints for placing and managing trades (e.g., POST /spot/v2/submit_order, POST /spot/v1/margin/submit_order, batch orders, cancel orders, margin borrow/repay/transfer). The quickstart includes a concrete example to place a limit buy order with signing, and the Operation Flow demands explicit CONFIRM before executing WRITE calls. This is a purpose-built crypto trading/execution skill (directly moves crypto funds via market/limit orders and margin ops), not a generic tool — therefore it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata