fincept-qa
Warn
Audited by Snyk on Apr 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly fintech-focused and describes testing and interactions that perform market orders and broker API calls. It contains live trading workflow steps ("connect broker → place order → confirm"), critical tests that place live orders and verify broker API calls, references broker sandbox/testnet environments (Alpaca, Binance, Interactive Brokers), and covers order fill/matching engine and trading calculations. These are specific financial execution operations (placing market/live orders and interacting with broker APIs), not generic tooling, so it meets the criteria for Direct Financial Execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata