starter-dashboard

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly integrates the Alpaca trading SDK and calls the Trading API and Market Data API ("calls the Trading API and Market Data API directly through the SDK"
• SKILL.md:3-5). It reads/writes Alpaca API credentials (APCA_API_KEY_ID / APCA_API_SECRET_KEY and flags --key-id / --secret
• SKILL.md:28-35, 39-41) and scaffolds an app that includes trade and orders pages (SKILL.md:63-65). Although it defaults to paper trading, the scaffolder can be configured for live trading if requested. These features are specifically designed to place and manage market trades (i.e., execute financial transactions), so this skill grants direct financial execution authority.