moomoo-trading

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill provides access to securities trading operations (order buy, order sell, order place, order modify, order cancel), which constitute direct financial operations (purchases/trades/settlement authorization). Although the underlying moomoo CLI handles OAuth authentication (moomoo auth status and automatic OAuth Bearer auth attachment), the skill documentation itself relies on agent-followed confirmation flags and instructions (Real account mutations require explicit user confirmation first, relay the prompt and wait for explicit approval) rather than an independent service- or execution-layer access control mechanism enforcing validation of the direct trading routes.