marlin-strategy

Warn

Audited by Snyk on Jun 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a trading strategy for crypto/crypto-like markets (BTC, ETH, SOL, HYPE) and describes automated order execution: "Producer enters", "taker-fallback entry", DSL entry/exit presets (Phase 1 max_loss_pct, Phase 2 ladder, 24h hard_timeout), scanner calls like market_get_asset_data (L2 order_book + candles) and leaderboard_get_markets (SM). This is a purpose-built tool to open and manage market positions (i.e., place trades) rather than a generic data or browser tool. That constitutes direct financial execution (market orders / trading of assets).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 28, 2026, 08:48 PM
Issues
1
Security Audit — snyk — marlin-strategy