alpaca-trading

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a trading API (Alpaca) with concrete functions to execute financial transactions: submitting market/limit/stop/trailing orders (client.submit_order with MarketOrderRequest/LimitOrderRequest/StopOrderRequest), replacing and cancelling orders (client.replace_order, client.cancel_order), closing positions (client.close_position, client.close_all_positions), options exercise (client.exercise_options), and crypto orders (e.g., submit_order for "BTC/USD"). It also distinguishes paper vs live base URLs (paper vs real-money live trading). These are direct mechanisms to move money/assets, so this grants Direct Financial Execution authority.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)