polo-spot
Warn
Audited by Snyk on Mar 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Poloniex spot-trading integration with authenticated private endpoints for trading and funds movement. It defines endpoints to create and batch orders (POST /orders, POST /orders/batch), cancel/replace orders, transfer funds between accounts (POST /accounts/transfer, POST /subaccounts/transfer), create withdrawals (POST /wallets/withdraw, POST /v2/wallets/withdraw), and manage deposit addresses. It requires API key and secret for signing. These are concrete crypto/financial execution operations (placing market/limit orders, withdrawing assets, transferring balances), not generic utilities. Therefore it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata