aster-api-trading-v1

Warn

Audited by Snyk on Oct 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill documents trading operations via the Aster Futures API (placing, batching, and canceling orders), which are direct financial operations (trades/swaps). The instructions mention that requests are "Signed (TRADE/USER_DATA)", but there is no documented independent access control or service authentication mechanism enforced by the service layer itself in the provided text (it only refers to a separate auth file, aster-api-auth-v1, without defining or enforcing the control criteria required).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 21, 2026, 08:55 PM
Issues
1