octopus-strategy
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading system with attached wallets and APIs for opening, editing, closing positions and orders. It references wallet env vars, leverage clamping, venue-specific max leverage, execution modes (FEE_OPTIMIZED_LIMIT, ensure_execution_as_taker), and explicit tools/function names such as create_position, close_position, edit_position, ratchet_stop_add/edit/delete, cancel_order, strategy_close, strategy_close_positions. Those are specific financial execution capabilities (market orders/position management on crypto venues), not generic tooling. Therefore it grants Direct Financial Execution Authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata