weex-monitor-skill

Warn

Audited by Snyk on Jun 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to monitor positions and trigger market-close actions. Its Task DSL includes action.type = "market_close" and the docs describe combined create-and-start flows that, after an explicit user confirmation token, activate bounded live PnL loops which delegate preview-order and confirm-order (market close) calls to weex-trader-skill. It also documents run-live-once, confirm-and-run-loop, and live-execution flags that authorize real-account access and real order execution. Although this skill delegates REST/order submission to weex-trader-skill, the skill's primary and explicit purpose is to initiate market orders (directional closes) as part of live execution flows, so it grants direct financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 12:51 PM
Issues
1
Security Audit — snyk — weex-monitor-skill