quantitative-finance
Warn
Audited by Snyk on Mar 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute financial trades. It defines order and position objects, an OrderManagementSystem with submit_order/_execute_order that sends orders to an exchange and records fills, execution logic (market/limit, fill price, commissions), position updates, execution optimizers (TWAP/VWAP), and production integrations. It also lists concrete trading/exec libraries and integrations (alpaca-trade-api, ccxt, Interactive Brokers, FIX) and discusses order management, risk checks, and broker reconciliation. These are specific market-order and trading execution capabilities (i.e., moving money), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata