create-routine
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for crypto trading routines: it references trading pairs and exchange connectors (e.g., "BTC-USDT", "binance_perpetual") and exposes a Hummingbot client API. The client includes portfolio endpoints and an executors API (notably create_executor), which is a trading execution construct (i.e., starts/controls trading executors that place orders). This is a domain-specific financial/trading interface (crypto market operations), not a generic tool, and therefore provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata