clawby-data
Warn
Audited by Snyk on Nov 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill includes trade execution connectors and automated trading scripts (exec/, script/42space/) capable of placing real-world trades, swaps, and spending funds (e.g., executing orders, buying tokens on Polymarket, Binance, GMGN, and 42.space). These qualify as direct financial operations. The documentation relies on user confirmation flags ("risk: high — confirm", "DRY unless --live") rather than an independent service-enforced access control or authentication mechanism on the financial execution routes themselves. Therefore, it falls under direct operations without established qualifying control.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata