futu-grid-strategy

Warn

Audited by Snyk on Nov 6, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 0.70). The skill instructs an AI to build a quantitative trading grid program for Futu OpenAPI that places, modifies, and cancels real orders across various markets (Hong Kong, US, Shanghai, Shenzhen). Although it defaults to a paper account, it supports live trading upon explicit user request and includes order execution workflows. This constitutes a direct financial operation (trading/purchasing/settlement authorization). Regarding access control, live trading requires the user's manual confirmation and trading password, but this depends entirely on the agent following instructions and implementing these checks in generated code rather than independent service-enforced authentication or execution-layer validation for the trade placement route.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Nov 6, 2026, 05:38 AM
Issues
1