a-share-paper-trading
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
SecuritySecurityscripts/paper_trading/service.py
MEDIUMSecurityMEDIUM
scripts/paper_trading/service.py
No clear malicious or supply-chain attack behavior is present in this fragment. The code is a straightforward paper-trading HTTP server, but it exposes sensitive state-changing operations without authentication or authorization and lacks request-size and robust input controls. Deployment on an untrusted network would create a high-impact access-control risk. The incomplete final line also prevents confirmation that the fragment is directly runnable.
Confidence: 98%Severity: 83%
Audit Metadata