alpaca-broker-funding-transfers

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documents instructions and API endpoints for creating, managing, and executing direct financial transfers (ACH deposits/withdrawals and wire transfers) between user accounts and external banks via the Alpaca Broker API (SKILL.md:41-53). Access control relies entirely on the underlying API credentials (client-credentials Bearer tokens or legacy Basic auth) without independent service-layer or multi-factor checks documented for the transfer execution routes themselves (SKILL.md:10).