alpaca-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to interact with the Alpaca Trading API via a CLI tool, which fetches market data and account information controlled by external third-party market actors and API responses.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents the Alpaca CLI tool, which includes explicit commands and API integrations for executing stock and crypto trades, submitting financial orders (alpaca order submit), managing brokerage accounts, and placing live or paper financial transactions.