moon-dev-trading-agents

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents an AI trading system capable of executing real trades across cryptocurrency exchanges (Hyperliquid and Extended Exchange) using private keys and API credentials stored in environment variables, with functions such as market_buy() and market_sell() (SKILL.md:213-214, SKILL.md:218-232, SKILL.md:262-276). This constitutes a direct financial operation (trading/purchasing). Regarding control, the system relies entirely on configuration, local private keys, API credentials, and internal script execution without any documented independent service-layer or execution-layer access controls gating the trade instructions (SKILL.md:83-84, SKILL.md:210-214).