coinmarketcap-diamonds-premium-analytics
Warn
Audited by Snyk on Jun 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a cryptocurrency analytics/trading application and references integration with exchanges: it instructs configuring EXCHANGE_API_KEY and EXCHANGE_SECRET environment variables for "trading features", discusses portfolio management across multiple exchanges, and includes rebalancing/trade suggestions. These elements indicate explicit support for exchange API integration (which can place market orders / move funds). Even though the examples don't show a specific "place order" endpoint, the documentation's explicit exchange API keys and "trading features" constitute direct financial execution capability.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The prompt explicitly instructs running the installer "as Administrator" and includes PowerShell commands that create/modify files under "C:\Program Files", which require elevated privileges and therefore push the agent to change the machine's system state.
Issues (2)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata