finhay-trading

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed for executing real-money stock trades via the Finhay Securities Open API. It exposes and documents signed write endpoints and CLI commands to place, modify, and cancel orders (e.g. POST /trading/oa/sub-accounts/{subAccountId}/orders, PUT .../orders/{orderId}, DELETE .../orders/{orderId}), requires API credentials (FINHAY_API_KEY/SECRET and a specific order sub-account ending in .4), and enforces a daily 2FA token (X-FH-2FA-TOKEN) for write operations. These are specific financial execution capabilities (placing market/limit orders, modifying/cancelling orders) — not generic tools — and operate on real funds. Therefore this skill grants Direct Financial Execution Authority.