alpaca-trading-paper-trading

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow ingests outsider-authored free text via the “Manual idea” path (Step 1.3/Step 3) where “you describe the trade in natural language,” which the agent parses to extract symbol/side/quantity and strategy intent before submitting orders.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly and specifically designed to execute trading orders via the Alpaca Trading API. It instructs the agent to construct order payloads, set idempotency keys, and submit orders (POST /v2/orders) for equities, options, and crypto (paper environment). These are direct market-order execution capabilities (even though limited to paper), not generic utilities — therefore it grants Direct Financial Execution authority.