quantitative-finance

Warn

Audited by Snyk on Mar 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute financial trades. It defines order and position objects, an OrderManagementSystem with submit_order/_execute_order that sends orders to an exchange and records fills, execution logic (market/limit, fill price, commissions), position updates, execution optimizers (TWAP/VWAP), and production integrations. It also lists concrete trading/exec libraries and integrations (alpaca-trade-api, ccxt, Interactive Brokers, FIX) and discusses order management, risk checks, and broker reconciliation. These are specific market-order and trading execution capabilities (i.e., moving money), not generic tooling.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 17, 2026, 02:53 PM
Issues
1
Security Audit — snyk — quantitative-finance