orderly-plugin-write
Warn
Audited by Snyk on May 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for building plugins on a trading platform (Orderly) and includes concrete, domain-specific hooks and targets that perform financial actions. Examples in the prompt show intercepting "Trading.OrderEntry.SubmitButton" and calling useOrderEntry().submit() ("Execute Trade" button), reference deposit forms (Deposit.DepositForm), and event subscriptions for "place_order_success" and "deposit_success". These are not generic APIs or browser automation — they are SDK hooks whose purpose is placing orders and handling deposits, i.e., moving funds/executing market actions. Therefore it provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata