copy-trade

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill implements a copy-trading copy-trade workflow that executes token swaps by delegating to swap-integration and viem-integration (SKILL.md:17, 37-38, 98-100). This constitutes a direct financial operation (token purchases/swaps). Access control relies on private keys stored in environment variables (SKILL.md:140) and user confirmation prompts (AskUserQuestion) or optional guardrails (SKILL.md:19, 86, 112-113), but no independent, service-enforced cryptographic key validation or execution-layer authentication is documented for the trade execution route itself. Therefore, it is a direct operation without established qualifying control.