python-bot-standards
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading backend standard: it defines modules for order management and execution (src.trading, src.trading.orders, src.trading.position_manager), provides a direct example call to execute a trade (trade_id = execute_trade(trade_params,...)), and specifies order lifecycle, order fills confirmation, reconciliation, real-time exit order validation, balance/wallet synchronization, crypto-market-specific retry logic, and other controls tied to placing and managing market/limit orders. These are specific, purpose-built financial execution capabilities (market orders, wallet/balance handling, exchange integrations), not generic tooling. Therefore it grants direct financial execution authority.
Audit Metadata