clawlogic-trader
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly provides on-chain financial operations and wallet management. It instructs the agent to initialize a local wallet (init auto-generates keys and prints a funding address / uses ARBITRUM_SEPOLIA_RPC_URL), accepts AGENT_PRIVATE_KEY as an environment variable, and exposes specific transaction commands that move funds: register (on-chain registration, returns txHash), create-market (with reward-wei / bond-wei), buy (deposit ETH / --eth to mint outcome tokens), assert (requires bond and submits on-chain assertion), settle (claim winnings), and positions (shows ethBalance). These are concrete crypto/blockchain transaction APIs and clearly intended to send/sign transactions and move ETH, so this is direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata