jump-trading-fpga-hft
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a high-frequency trading (HFT) trading-system guide: it defines FPGA modules that parse market data and call build_buy_order/build_sell_order, sets order_valid/order_data outputs, maintains positions and max_position, has tick-to-trade and order_tx_hw_ts logic, and wire-to-wire order generation/measurement. This is not a generic tool — its primary and explicit purpose is to generate and transmit market orders (buy/sell) for trading, i.e., direct market execution.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (medium risk: 0.40). The prompt includes low-level code that configures NIC/PHC hardware (ioctls, opening /dev/ptp, enabling hardware timestamping) which modifies device/kernel state and typically requires root privileges, but it does not instruct the agent to obtain sudo, bypass security, edit system files, or create accounts.
Audit Metadata