dca
Warn
Audited by Snyk on Apr 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a crypto trading tool: it automates recurring on-chain swaps on Stacks via Bitflow, calls @bitflowlabs/@stacks SDKs, accepts a private key (STACKS_PRIVATE_KEY) or wallet password, fetches live quotes, and — when run with --confirm — signs and broadcasts transactions (logs tx hashes). This is a specific, primary-purpose financial execution capability (crypto/blockchain wallet + transaction sending), not a generic tool.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata