coinmarketcap-diamonds-premium-analytics

Warn

Audited by Snyk on Jun 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a cryptocurrency analytics/trading application and references integration with exchanges: it instructs configuring EXCHANGE_API_KEY and EXCHANGE_SECRET environment variables for "trading features", discusses portfolio management across multiple exchanges, and includes rebalancing/trade suggestions. These elements indicate explicit support for exchange API integration (which can place market orders / move funds). Even though the examples don't show a specific "place order" endpoint, the documentation's explicit exchange API keys and "trading features" constitute direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs running the installer "as Administrator" and includes PowerShell commands that create/modify files under "C:\Program Files", which require elevated privileges and therefore push the agent to change the machine's system state.

Issues (2)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 20, 2026, 05:05 PM
Issues
2
Security Audit — snyk — coinmarketcap-diamonds-premium-analytics