gate-exchange-unified
Warn
Audited by Snyk on Mar 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform financial operations on a crypto exchange unified account. It includes specific, named mutation APIs that move funds or change account financial state (e.g., cex_unified_create_unified_loan for borrow/repay, cex_unified_set_unified_mode for switching account mode, cex_unified_set_user_leverage_currency_setting for changing leverage, cex_unified_set_unified_collateral for collateral changes). The workflow and tool mapping explicitly describe executing borrow/repay, full repayment, leverage and collateral updates, and other high-impact money-moving actions (with required confirmations). This matches the definition of Direct Financial Execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata