senpi-deposit-withdraw-transfer
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly defines and instructs use of on-platform financial APIs/tools that move user funds (e.g., strategy_top_up, strategy_withdraw_funds, strategy_close, transfer_spot_to_perps, user_claim_referral_rewards) and tells the agent to call movement tools and portfolio/withdrawable-checking endpoints (account_get_portfolio, strategy_get_clearinghouse_state, strategy_list). Although external withdrawals are blocked, the agent is explicitly authorized to execute on-platform money movements, so this is direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata