alva

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides financial research, backtesting, portfolio simulation, and trading execution capabilities. It includes direct order placement and broker interactions across venues via commands like alva broker and alva trading (documented in SKILL.md:762-763 and references/api/trading.md). These features constitute direct financial operations (trades/settlement authorization). Although authentication requirements (such as API keys and session tokens) exist, these are general access credentials rather than independent execution-layer transaction authorization controls (such as secondary transaction signing or explicit user per-order confirmation required by the service layer for live orders, which the prompt notes are delegated to agent logic rather than independently enforced). Therefore, it falls under direct operations without established qualifying control.