caracal-strategy
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading system with direct market-execution capabilities. It references wallet environment variables for two funded books, integrates with specific venues (Hyperliquid), enforces leverage and execution policies (FEE_OPTIMIZED_LIMIT, maker/taker windows), and documents trading actions and APIs such as create_position, close_position, edit_position, cancel_order, strategy_close, ratchet_stop_add/edit/delete. Those are specific market-order / position-management functions (not generic tooling), so this skill grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata