alpaca-trading-paper-trading-cli

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to construct and execute trading orders via the Alpaca CLI (e.g., "alpaca order submit", concrete example commands, cancel/replace/cancel-all/position close-all). It supports market/limit/stop order types and asset classes (equities, options, crypto) and outlines full order lifecycle and submission automation. Although it targets the paper endpoint, the primary capability is to send market/order transactions (i.e., execute trades), which qualifies as Direct Financial Execution.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs the agent to create and modify system-level files (a wrapper in /usr/local/bin, a crontab under /etc/cron.d, logs under /var/log, and to generate systemd/launchd service files), which change OS state and typically require elevated privileges.