octopus-strategy

Warn

Audited by Snyk on Jun 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a trading system with attached wallets and APIs for opening, editing, closing positions and orders. It references wallet env vars, leverage clamping, venue-specific max leverage, execution modes (FEE_OPTIMIZED_LIMIT, ensure_execution_as_taker), and explicit tools/function names such as create_position, close_position, edit_position, ratchet_stop_add/edit/delete, cancel_order, strategy_close, strategy_close_positions. Those are specific financial execution capabilities (market orders/position management on crypto venues), not generic tooling. Therefore it grants Direct Financial Execution Authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 28, 2026, 08:48 PM
Issues
1
Security Audit — snyk — octopus-strategy