@349/bybit
Warn
Audited by Snyk on Mar 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a Bybit trading integration requiring BYBIT_API_KEY and BYBIT_SECRET and provides direct trading actions: market/limit/stop/trailing/TP+SL combo orders, futures orders, placing and cancelling orders, and viewing balances/positions. It uses the Bybit API (via CCXT and raw Bybit params) to create orders (e.g., exchange.create_order and order CLI examples). This is a specific crypto exchange integration intended to execute financial transactions, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata