fincept-qa

Warn

Audited by Snyk on Apr 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly fintech-focused and describes testing and interactions that perform market orders and broker API calls. It contains live trading workflow steps ("connect broker → place order → confirm"), critical tests that place live orders and verify broker API calls, references broker sandbox/testnet environments (Alpaca, Binance, Interactive Brokers), and covers order fill/matching engine and trading calculations. These are specific financial execution operations (placing market/live orders and interacting with broker APIs), not generic tooling, so it meets the criteria for Direct Financial Execution authority.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 11, 2026, 06:19 PM
Issues
1
Security Audit — snyk — fincept-qa