crypto-agent-trading
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly and specifically designed to perform cryptocurrency financial operations via the Crypto.com API. It provides scripted, required commands to obtain a quotation and then to confirm/execute trades (npx tsx ... trade.ts quote ... and trade.ts confirm ...), supports purchase/sale/exchange (buy, sell, swap), reads CDC_API_KEY and CDC_API_SECRET from environment, and includes operational controls like viewing balances, transaction history, weekly limits, and a kill switch that revokes the API key. These are not generic utilities — the primary and explicit definition of this tool is to move crypto funds and execute market transactions.
Audit Metadata