quant-trading-system-hardened

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's runtime code (auto_trader.py, trading_system.py, trading_system_v2.py, trading_system_v3.py) directly fetches real-time and historical market data from the external public API https://api.hyperliquid.xyz/info, and those untrusted third‑party responses are read and used to generate strategy signals and execution decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a crypto automated trading system: it describes "自动开单" (automatically open orders), "自动交易" (auto trading), "Auto Position Management", SL/TP risk controls, and lists supported coins (BTC, ETH, SOL, XRP). Those features indicate it is designed to place market orders / manage positions (i.e., execute trading transactions). Although the guardrails state it operates with virtual/paper funds only, the primary and explicit purpose is trading (sending buy/sell orders on crypto assets), which meets the "market orders / crypto" criteria for Direct Financial Execution.