aster-trading
Warn
Audited by Snyk on Apr 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly exposes trading and account-management APIs that perform monetary operations: e.g., create_order and create_spot_order (place market/limit/stop orders), cancel_order/cancel_spot_order, transfer_funds / transfer_spot_futures (move assets between accounts), set_leverage / set_margin_mode (change risk settings), and account endpoints (get_balance, get_positions, get_account_v4). The setup requires configured API keys and the docs show concrete workflows that call create_order to execute trades. These are specific, purpose-built financial execution functions (market orders and asset transfers), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata