aster-api-trading-v1
Warn
Audited by Snyk on Oct 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill documents trading operations via the Aster Futures API (placing, batching, and canceling orders), which are direct financial operations (trades/swaps). The instructions mention that requests are "Signed (TRADE/USER_DATA)", but there is no documented independent access control or service authentication mechanism enforced by the service layer itself in the provided text (it only refers to a separate auth file,
aster-api-auth-v1, without defining or enforcing the control criteria required).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata