python-bot-standards

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a trading backend standard: it defines modules for order management and execution (src.trading, src.trading.orders, src.trading.position_manager), provides a direct example call to execute a trade (trade_id = execute_trade(trade_params,...)), and specifies order lifecycle, order fills confirmation, reconciliation, real-time exit order validation, balance/wallet synchronization, crypto-market-specific retry logic, and other controls tied to placing and managing market/limit orders. These are specific, purpose-built financial execution capabilities (market orders, wallet/balance handling, exchange integrations), not generic tooling. Therefore it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:24 AM