copy-trade

Warn

Audited by Snyk on Jul 1, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). This skill is specifically designed to execute crypto trades: it detects leader wallet swaps and delegates execution to a Trading API and a signing/broadcast integration. It explicitly names swap-integration (uniswap-trading) which runs check_approval → quote → swap (including signing and broadcast), and viem-integration which handles accounts, signing, and transaction broadcast. The skill supplies tokenIn/tokenOut, sized amount, target chain id, and the follower's wallet to that execution path, thereby enabling on-chain transfers/trades. This is a direct crypto/blockchain execution capability (moving funds), not a generic tool.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 1, 2026, 07:46 PM
Issues
1
Security Audit — snyk — copy-trade