alpaca-broker-integration

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents integration with the Alpaca Broker, Trading, and Market Data APIs, covering programmatic account funding, journal transfers, and order placement. These constitute direct financial operations (transfers, purchases, trades). However, authentication requires explicit API credentials (client ID/secret or Bearer tokens) configured through service API credentials, establishing independent service-layer access control over the API calls. Therefore, the risk tier is medium.