aicoin-freqtrade

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). The files lib/defaults.json contain hardcoded API keys and secrets: "accessKeyId": "ronJ8uI0Yj2soAfGVs5H1YALUIINbE22" "accessSecret": "CWHZcH2us1CLSE7grroR1TpS0Z1JxTwU" These strings have high entropy and are literal API credentials rather than placeholders, even though the file is labeled as containing defaults for a public/free tier.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly discusses managing market trading bots (Freqtrade) and includes capabilities for executing trades, placing orders, managing positions (force_enter, force_exit), and managing live trading modes (set_dry_run), which directly relates to market orders and financial asset execution.