senpi-strategy-author
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly references and instructs use of specific financial execution tools and APIs: raw MCP calls like
strategy_create_custom_strategy/create_position(market orders / position creation),account_get_portfolio(reads balances for funding decisions),deploy.py create <path> --budget <amount>(funds a fresh wallet from the user's embedded wallet), and references tostrategy_withdraw_funds/ funding flows. These are concrete, domain-specific operations that move or allocate money and create/fund wallets — not generic tooling — so the skill grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata