new-strategy
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading strategy system. Its Starlark strategies return signal(...) calls with actions "BUY", "SELL", "SHORT", "COVER" plus position_pct, stop_loss, take_profit, and the workflow shows wiring an activated user strategy into a product's trading config (sn trading set ... --spot user:...) and backtesting against exchanges with futures/leverage. Those builtins and commands are specific financial/trading primitives intended to produce live trade signals that the trading engine will act on — i.e., market order execution intent. This is a specialized financial tool, not a generic interface, so it constitutes direct financial execution capability.
Audit Metadata