trader-hand-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow actively searches and fetches web pages, financial data sources, and sentiment sites via web_search and web_fetch based on the asset watchlist.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation includes explicit operational sections for the Alpaca Trading API, containing fully formed curl commands to execute market orders, limit orders, stop orders, and close positions. This constitutes Direct Financial Execution via specific trading API integration.