orderly-positions-tpsl
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for trading on the Orderly network: it requires an API key with "trading" scope and exposes concrete order execution APIs and SDK hooks. Examples include POST /v1/order (market close of a position), POST /v1/algo/order (placing TP/SL, trailing stops, positional algo orders), usePositionClose and useTPSLOrder React hooks that submit orders, and POST /v1/client/leverage to change leverage. These are specific tools to place/modify/cancel financial orders (move/close positions and adjust account leverage), not generic interfaces. Therefore it grants direct financial execution authority.
Audit Metadata