bithumb-deposit
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is specifically designed to interact with the Bithumb cryptocurrency exchange and includes explicit write operations that move or enable movement of real funds. It requires API credentials and exposes commands to:
- Generate deposit addresses for specific currencies/networks (bithumb deposit generate-address) — a wallet/address management operation tied to moving crypto funds.
- Request KRW fiat deposits (bithumb deposit krw) — an explicit fiat deposit request that triggers real-money movement and requires Kakao 2FA.
- It also documents safety gates and verification steps for writes and states that there is no demo mode — all deposit operations are real.
These are not generic utilities (e.g., general HTTP or browser automation); they are direct financial operations specific to a payment/crypto exchange API. Therefore it grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata