alpaca-broker-journals
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill documents API endpoints for moving cash and securities between accounts within an Alpaca omnibus via Journals (POST /v1/journals, POST /v1/journals/batch, POST /v1/journals/reverse_batch), constituting a direct financial operation (asset transfers/settlement authorization). Authentication relies on client-credentials Bearer tokens or legacy Basic auth as documented in reference notes, establishing service API credentials.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata