xrpl-trading
Warn
Audited by Snyk on Oct 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill provides operational workflows to place limit orders (
OfferCreate) and cancel resting offers (OfferCancel) on the XRPL DEX (Flow 1 and Flow 2), which constitute direct financial operations (trades/swaps/settlement authorization). These direct operations feature documented independent access control and validation mechanisms enforced via external signing delegation and runtime pre-flight checks/simulations (delegated to the XRPL Agent Wallet skill supporting HSM, KMS, OWS, and time-window/network policy validation).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata