moonpay-trading-automation

Warn

Audited by Snyk on Mar 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform cryptocurrency trades and manage wallets: it composes and schedules mp CLI commands that call "mp ... token swap", checks balances, and sells/buys tokens (DCA, limit orders, stop-loss). It requires an authenticated, funded wallet and uses the mp tool to execute swaps and modify holdings. This is a specific crypto execution capability (wallets/swaps/signing), not a generic interface, so it grants direct financial execution authority.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs the agent to write persistent scripts and modify user schedulers (crontab and launchd LaunchAgents), creating autonomous, persistent changes to the host that can execute actions (trades) without further user interaction.

Issues (2)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 25, 2026, 04:57 PM
Issues
2