alpaca-trading
Warn
Audited by Snyk on Jul 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly for Alpaca broker automation and trading workflows. It references PowerShell modules for "orders, positions, and account helpers", requires paper/live endpoints, includes a live-trading confirmation gate for scripts that "can send live orders", and requires a paper-trade round trip that places, verifies, and cancels orders. These are specific market-order/broker integration capabilities (direct financial execution).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata