owl-strategy
Warn
Audited by Snyk on May 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly a trading strategy for crypto perpetuals and includes direct execution primitives. The spec names runtime actions that open and close positions (OPEN_POSITION, Exit via FEE_OPTIMIZED_LIMIT, maker/taker fallback), references wallet env vars (OWL_WALLET, ${WALLET_ADDRESS}), leverage/margin settings, per-asset universe of crypto perps, and APIs used for sizing/state (strategy_get_clearinghouse_state, market_list_instruments). Although the producer only emits signals, the runtime is defined to autonomously execute orders and manage DSL exits — i.e., it is explicitly designed to place market/limit orders and manage positions on crypto markets. This matches “Crypto/Blockchain (Wallets, Swaps, Signing)” and “Market Orders” in the core rule.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata