weex-monitor-skill
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to monitor positions and trigger market-close actions. Its Task DSL includes action.type = "market_close" and the docs describe combined create-and-start flows that, after an explicit user confirmation token, activate bounded live PnL loops which delegate preview-order and confirm-order (market close) calls to weex-trader-skill. It also documents run-live-once, confirm-and-run-loop, and live-execution flags that authorize real-account access and real order execution. Although this skill delegates REST/order submission to weex-trader-skill, the skill's primary and explicit purpose is to initiate market orders (directional closes) as part of live execution flows, so it grants direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata