📦
История аудитов
ccxt-python - 1 аудит
Версия аудита 1 Последняя
7 нояб. 2026 г., 14:39
All 419 static findings are false positives involving Markdown, reference URLs, proxy placeholders, exchange authentication, or financial API terminology. Two documentation risks remain: live routing without spending or freshness limits, and raw diagnostics without redaction guidance. No evidence found of prompt injection, hidden command execution, or intentional credential exfiltration in the reviewed file.
1
Просканировано файлов
1,284
Проанализировано строк
5
Пункты проверки
0
Ложные срабатывания проигнорированы
Подтверждённые проблемы безопасности (2)
Средний
Live routing example omits financial safety limits
The example enables live trading without a notional cap or plan-age limit. The guide states both limits are optional, allowing excessive spending or stale-price execution.
The live example omits both safeguards, and the later prose explicitly states neither has a default limit. This is documented financial exposure, not malicious intent.
Низкий
Private API diagnostics lack redaction guidance
Debugging guidance enables verbose logging and prints raw HTTP and JSON responses without redaction instructions. Private API use can expose account data in saved or shared diagnostics.
The guide explicitly prints unfiltered responses while also covering private account APIs. Actual disclosure depends on the requested endpoint and subsequent log handling.
Факторы риска
⚙️ Внешние команды (50)
SKILL.md:13-15 SKILL.md:15-18 SKILL.md:18-20 SKILL.md:20-23 SKILL.md:23-26 SKILL.md:26-33 SKILL.md:33-40 SKILL.md:40-43 SKILL.md:43-55 SKILL.md:55-58 SKILL.md:58-70 SKILL.md:70-76 SKILL.md:76-77 SKILL.md:77 SKILL.md:82 SKILL.md:102-116 SKILL.md:116-119 SKILL.md:119-130 SKILL.md:130-133 SKILL.md:133-147 SKILL.md:147-152 SKILL.md:152-159 SKILL.md:159-162 SKILL.md:162-172 SKILL.md:172-175 SKILL.md:175-183 SKILL.md:183-188 SKILL.md:188-198 SKILL.md:198-201 SKILL.md:201-210 SKILL.md:210-213 SKILL.md:213-218 SKILL.md:218-221 SKILL.md:221-233 SKILL.md:233-236 SKILL.md:236-242 SKILL.md:242-245 SKILL.md:245-251 SKILL.md:251-256 SKILL.md:256-268 SKILL.md:268-271 SKILL.md:271-281 SKILL.md:281-284 SKILL.md:284-294 SKILL.md:294-297 SKILL.md:297-310 SKILL.md:310-313 SKILL.md:313-326 SKILL.md:326-329 SKILL.md:329-342
🌐 Доступ к сети (16)
🔑 Переменные окружения (11)
Аудитор:: codex