signal-aggregation
Warn
Audited by Snyk on Jun 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly includes functionality to execute trades: it defines an execute_aggregated_signal call with an Endpoint POST http://localhost:8011/execute, states "Execute trades based on unified signal strength", says execution "Routes to broker if approved", and the example workflow calls an execute endpoint with symbol and account_size to place orders. These are specific market-order/broker-integration capabilities (direct financial execution), not generic tooling. Therefore it grants direct financial execution authority.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata