gmx-trading

Warn

Audited by Snyk on Mar 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a trading SDK for GMX V2 with full read+write capabilities. It documents concrete API/SDK methods that submit on-chain transactions to trade or move funds: e.g., sdk.orders.long(), sdk.orders.short(), sdk.orders.swap(), sdk.orders.createIncreaseOrder(), sdk.orders.createDecreaseOrder(), createDecreaseOrder() flow, and convenience methods that "handle ... transaction submission automatically." The examples show setting up a wallet with private key and walletClient and passing account/walletClient into the SDK, and describe signing/relay/subaccount signing modes. These are specific crypto financial execution capabilities (placing market/limit/stop orders, swaps, leverage, closing positions) — not generic tooling.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 30, 2026, 08:06 AM
Issues
1