oro-gold
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents direct financial operations including buying and selling gold (
/trading/purchases/user,/trading/sales/user) and managing partner treasury/reserves. These actions execute trades and transfers of financial assets (USDC and GRAIL tokens). The API requires authentication via challenge signing and an API key header (x-api-key), establishing independent service-layer authentication for the payment/trading routes.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata