trading-orchestrator
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute trading operations: it references broker.getPositions(), computes lotSize via risk checks, and calls executor.execute(...) to place trades. The orchestration pipeline shows full trade lifecycle (research → signal → risk validation → execute), includes portfolio exposure checks, circuit breakers tied to halting executions, and verification items for sending Slack alerts and logging executed trades. These are specific market/broker/execute actions (i.e., moving money/placing market orders), not generic tooling, so it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata