blofin-trader
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading integration for the BloFin exchange and exposes concrete, transactional APIs: place_order, batch_orders, place_algo_order, close_position, place_tpsl, cancel_order, etc. It requires authenticated API access with TRADE permission and is explicitly designed to submit market/limit/FOK/IOC orders, manage positions, and set TP/SL — i.e., to send trade transactions that alter account balances/positions. This is a specific financial execution tool (crypto exchange trading), not a generic interface, so it meets the Direct Financial Execution criteria.
Audit Metadata