alpaca-broker-journals

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill explicitly instructs the agent at runtime to fetch live documentation to drive its behavior (e.g., "Check https://docs.alpaca.markets/llms.txt or https://docs.alpaca.markets/llms-full.txt" and to use the alpaca-docs MCP live schema such as the /v1/journals endpoint), so external content from https://docs.alpaca.markets/... (and the alpaca-docs MCP) would be fetched and used to control prompts/schema generation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill documents Alpaca Broker "journals" APIs that explicitly create and manage value transfers: POST /v1/journals (cash JNLC or securities JNLS), batch and reverse-batch journal creation, and DELETE of pending journals. The endpoints and fields (from_account, to_account, amount, symbol, qty), idempotency-key guidance, and status lifecycle all describe direct movement of USD and securities between accounts (including one-to-many and many-to-one transfers). Although confined to an Alpaca omnibus, these APIs are specifically designed to execute financial transfers, so the skill grants direct financial execution capability.