Description-Behavior Mismatch
Medium
- Confidence
- 88% confidence
- Finding
- The README presents the skill as a general-purpose advanced DeFi trading protocol, while the declared skill metadata says it is specifically a stop-loss skill. This scope mismatch can mislead an agent or user into invoking capabilities beyond the intended permission boundary, especially in a financial context where broader order execution implies token-spending actions.
