deploy

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). At deploy time the workflow runs docker compose pull and pulls container images from the GitHub Container Registry (e.g., ghcr.io/lgbarn/keltner-bot, ghcr.io/lgbarn/ema-bot, ghcr.io/lgbarn/ml-bot), which downloads remote code that will be executed on the Pi and are required runtime dependencies.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically about deploying and controlling live trading bots that connect to brokers. It exposes explicit commands and states tied to execution (e.g., just bot-start-live , EXECUTION_MODE=topstepx guardrails, broker token / session.valid, and health checks showing market.isOpen and apiConnected). Those are specific trading execution controls (bots that place market orders via broker connections), not generic automation. Therefore it grants direct financial execution capability.