heron-strategy
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading strategy for ETH and defines real order/position lifecycle actions. It describes emitting signals that the runtime/producer opens "via FEE_OPTIMIZED_LIMIT" and documents explicit execution semantics (ensure_execution_as_taker flags) and DSL-managed exits. It lists and reserves concrete finance execution call sites (create_position, close_position, edit_position, ratchet_stop_add/edit/delete, cancel_order, strategy_close, strategy_close_positions). This is a purpose-built market-order/position-management skill (crypto trading), not a generic tool, so it grants direct financial execution capabilities.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata