orderflow-analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill's workflow ends in trade execution. Its signal table suggests trading actions, its guardrails require trades to pass through confirmation_mesh validation, and its example calls execute_confirmed_trade(result) after validate_signal returns approved. Trades are direct operations, so the control test applies. No documented authentication or authorization is enforced by the service or execution layer for this route. validate_signal is described only as a confirmation step, with no account for how it authenticates or enforces approval. The guardrails ("Never execute trades based on LOW confidence signals," "Require L2 liquidity verification") are agent-followed rules, not independent access checks. The Alpaca Pro/Polygon prerequisite covers market-data connectivity, not trading authorization. Without an established qualifying control, the direct trade route is High.