finlab

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill documentation guides quantitative trading strategy development, backtesting, and optional broker order execution using the FinLab package and SinopacAccount. While broker order execution (SinopacAccount and OrderExecutor) is mentioned for live trading in lines 301-321, this capability represents direct financial operations (trading/purchasing) without documented independent authentication or authorization controls enforced by the service layer within the skill instructions. Therefore, it falls under direct operations without established qualifying control, resulting in a high severity rating.