dca

Warn

Audited by Snyk on Apr 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a crypto trading tool: it automates recurring on-chain swaps on Stacks via Bitflow, calls @bitflowlabs/@stacks SDKs, accepts a private key (STACKS_PRIVATE_KEY) or wallet password, fetches live quotes, and — when run with --confirm — signs and broadcasts transactions (logs tx hashes). This is a specific, primary-purpose financial execution capability (crypto/blockchain wallet + transaction sending), not a generic tool.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 8, 2026, 02:45 AM
Issues
1
Security Audit — snyk — dca