gmx-trading
Warn
Audited by Snyk on Mar 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading SDK for GMX V2 with full read+write capabilities. It documents concrete API/SDK methods that submit on-chain transactions to trade or move funds: e.g., sdk.orders.long(), sdk.orders.short(), sdk.orders.swap(), sdk.orders.createIncreaseOrder(), sdk.orders.createDecreaseOrder(), createDecreaseOrder() flow, and convenience methods that "handle ... transaction submission automatically." The examples show setting up a wallet with private key and walletClient and passing account/walletClient into the SDK, and describe signing/relay/subaccount signing modes. These are specific crypto financial execution capabilities (placing market/limit/stop orders, swaps, leverage, closing positions) — not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata