tdxquant
Warn
Audited by Snyk on May 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). 该 Skill 明确包含用于下单和管理交易的接口与脚本,不是泛化工具。文档多处明确提到“交易下单”、并列出 scripts/trade.py(用途:交易下单、查询持仓/委托/资产、撤单),以及触发条件中包含“交易下单”。按规则中“Market Orders (Buying/Selling stocks or assets)”应被标记为直接金融执行权限,因此该技能具有直接下单/执行交易的能力。
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata