copy-trade
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). This skill is specifically designed to execute crypto trades: it detects leader wallet swaps and delegates execution to a Trading API and a signing/broadcast integration. It explicitly names swap-integration (uniswap-trading) which runs check_approval → quote → swap (including signing and broadcast), and viem-integration which handles accounts, signing, and transaction broadcast. The skill supplies tokenIn/tokenOut, sized amount, target chain id, and the follower's wallet to that execution path, thereby enabling on-chain transfers/trades. This is a direct crypto/blockchain execution capability (moving funds), not a generic tool.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata