jump-trading-fpga-hft

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a high-frequency trading (HFT) trading-system guide: it defines FPGA modules that parse market data and call build_buy_order/build_sell_order, sets order_valid/order_data outputs, maintains positions and max_position, has tick-to-trade and order_tx_hw_ts logic, and wire-to-wire order generation/measurement. This is not a generic tool — its primary and explicit purpose is to generate and transmit market orders (buy/sell) for trading, i.e., direct market execution.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (medium risk: 0.40). The prompt includes low-level code that configures NIC/PHC hardware (ioctls, opening /dev/ptp, enabling hardware timestamping) which modifies device/kernel state and typically requires root privileges, but it does not instruct the agent to obtain sudo, bypass security, edit system files, or create accounts.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 02:07 PM