elephant-strategy
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading system: it defines wallets, margin_pct, slot limits, order execution details (FEE_OPTIMIZED_LIMIT, ensure_execution_as_taker), and runtime daemons that place real trades on the "XYZ" venue. It also names execution API/functions (create_position, close_position, edit_position, ratchet_stop_*, cancel_order, strategy_close, strategy_close_positions) and enforces a rule that user sessions MUST NOT call those tools — implying those tools exist and perform order/position operations. This is a purpose-built financial execution skill (market order/position management), not a generic tool, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata