claude-tradingview-mcp-autotrading

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill contains documentation and instructions for setting up an automated cryptocurrency trading bot using MCP and exchange APIs, which constitutes financial-related content.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow ingests unstructured YouTube transcripts via Apify scraper output pasted into prompt files, presenting an indirect prompt injection risk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill contains specific instructions, code snippets, and configuration for connecting to cryptocurrency exchanges (such as BitGet via CCXT) and executing market orders (exchange.createMarketOrder) to buy and sell assets.

Issues (3)

E004
CRITICAL

Prompt injection detected in skill instructions.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 16, 2026, 10:29 PM
Issues
3
Security Audit — snyk — claude-tradingview-mcp-autotrading