deepbook
Warn
Audited by Snyk on Feb 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed for on-chain trading and fund operations: it documents DeepBook CLOB functionality on Sui with concrete APIs/modules and examples for placing limit and market orders, performing token swaps, creating/managing pools, and using BalanceManager to deposit/withdraw funds and generate trade authorization proofs. The prompt includes exact function names (e.g., pool::place_limit_order, pool::swap_exact_base_for_quote, balance_manager::deposit, balance_manager::generate_proof_as_owner) and package/module IDs, demonstrating direct transaction/trade execution capabilities rather than a generic tool. These are specific financial execution operations (sending orders, swapping tokens, managing on-chain balances), so it qualifies as Direct Financial Execution.
Audit Metadata