n8n-workflow

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly lists Alpaca API credentials (APCA-API-KEY-ID, APCA-API-SECRET-KEY) and includes "trading alerts" as a primary use case. Alpaca is a brokerage API used for placing market orders, so the skill directly enables integration with a market-order-capable service and therefore grants direct financial execution capability.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit, actionable instructions to edit system configs (cloudflared ingress), run privileged maintenance on the Proxmox container (pct exec ... systemctl, journalctl), restart system services, and update software, all of which modify the host/container state and require elevated privileges.